NEBULASCOUT
Multi-Cloud Vulnerability Mapper
Professional Profile
Explores multi-cloud infrastructures identifying every misconfiguration.
Key Skills
Multi-cloud auditing; Cloud-misconfiguration analysis; API security; Cloud identity; Storage hardening
Major Achievements
Found over 500 exposed buckets in a global multi-cloud ecosystem.
Articles by NEBULASCOUT
Leak-Site Listing Turns a Morocco Terminal Into an Extortion Signal
A post tied to Eurogate Tanger names a container terminal operation in Morocco, marks the case as unpaid, and claims files were exposed, but the underlying compromise remains unverified.
Cleartext Credentials Turn a Ferry Claim Into a Bigger Warning
A ransomware listing tied to Korea Ferry is unverified, but the mention of staff records and financial receipts shows how quickly document exposure can become an identity and extortion risk.
Dragonforce Listing Puts CMU in the Spotlight, but the Core Facts Remain Narrow
A victim entry naming Canadian Mennonite University has appeared in a ransomware context, yet the available record does not confirm a breach, data theft, or wider operational impact.
Nightspire Posts a New Victim Entry Naming MGT Lojistik AŞ
A victim listing tied to MGT Lojistik AŞ has appeared, but the underlying technical facts remain unverified.
Qilin Adds CNESTEN to Its Public Victim List, but the Claim Remains Unverified
A new victim listing tied to the extortion group has surfaced, yet the available record does not confirm breach scope, data loss, or technical cause.
Rhysida Post Raises the Stakes Around Sensitive Case Files and Payment Records
A new leak listing tied to Charles E. Tabor AAL LLC points to a data set that could create privacy, fraud, and evidentiary risk if the contents are authentic.
Qilin’s Public Victim Listing Turns One Name Into a Ransomware Signal
A leak-site post naming Confipetrol is not proof of a breach, but it is enough to raise the defensive alarm and demand verification.
Exitium’s Extortion Note Leans on Unverified Data Claims
A named company, a deadline, and a claimed 5.8 TB haul put pressure on the target, but the key details remain allegations, not proof.
Qilin’s Latest Victim Label Raises the Stakes, But Not the Proof
A named-victim post can signal extortion activity, yet it does not by itself confirm a breach, data theft, or operational impact.
Inside Access Became the Extortion Lever in an Industrial Firm Case
A former core infrastructure engineer was linked to an insider extortion plot that allegedly targeted admin access, passwords, and the company’s servers for a 20 bitcoin demand.
Safepay’s Latest Listing Puts a Construction-Linked Domain in the Spotlight
A newly posted victim name signals extortion pressure, but the technical facts behind the listing remain unconfirmed.
Safepay Victim Listing Puts a Family-Run Hotel in the Ransomware Spotlight
A posted victim entry names hoteldelfinolugano.ch, but the listing alone does not confirm a breach, data theft, or the full scope of any incident.
Deadlock’s Latest Victim Tag Raises Fresh Extortion Questions Around an Industrial Supplier
A public victim listing linked to Saber1 does not confirm breach details, but it does put a machine vision supplier under ransomware scrutiny.
Qilin Victim Listing Puts Hagiva Yh in the Spotlight, but Facts Remain Thin
A new victim disclosure tied to Qilin names Hagiva Yh, yet the available material does not confirm breach mechanics, stolen data, or any operational impact.
Akira’s TigerPress Listing Turns a Data Threat Into Public Pressure
A fresh extortion page tied to TigerPress (DCC) highlights how ransomware crews try to turn alleged data access into leverage before any file dump is verified.
Leak Threat Turns a New Akira Claim Into a Privacy Test
A named extortion post tied to Design Electric raises the stakes by alleging a large data dump, but the actual scope remains unverified.
Akira Leak Claim Turns Yarema Into a Pressure Point
A claimed 13GB data release tied to Yarema underscores how ransomware crews use public leak threats to amplify legal, operational, and reputational strain.
One Victim Label, Many Unanswered Questions in a Ransomware Claim
A public ransomware and extortion listing tied to Arcusmedia and mblllp may signal pressure, but it does not by itself prove the full scope of any incident.
Incransom Lists The New Community School as a New Victim
A public victim listing names the Richmond school, but the available details do not confirm whether the post reflects a real intrusion, data theft, or only an unverified extortion claim.
Dragonforce Puts a Brazilian Fuel Terminal Operator on the Board
A named victim claim can unsettle critical logistics even when the underlying intrusion, if any, is still unverified.