CUTSIGNcutting for sign — daily OSINT threat read

Search — “Leakers$”

2 stories · 0 IoCs

Stories

P3

Leakers$ group claims billboard software hijack showing explicit footage in Egypt, Malaysia and Brazil

brief 2026-11-04quick readLowactor: Leakers$

A group calling itself Leakers$ claims it exploited software used to send content to LED billboards, displaying explicit footage in Egypt, Malaysia and Brazil on or around October 29. Egyptian authorities reportedly described a website compromise at the billboard operator, and the group's account describes a content-transmission software vulnerability and weaknesses reachable through the systems' web pages and interfaces, which is not independently confirmed in detail. Defenders should review internet-exposed digital signage management and content-publishing interfaces, default or reused credentials, and access by suppliers.

P3

Leakers$ claims access to billboard content-management software and displayed explicit footage; attacks unconfirmed beyond vendor-agnostic reports

brief 2026-11-03quick readactor: Leakers$

A group calling itself Leakers$ claimed it exploited software used to send content to LED billboards, after explicit footage appeared on displays in Egypt, Malaysia, and Brazil. Egyptian authorities attributed the incident to a billboard operator's website compromise, while the group said it found thousands of exposed systems through roughly two hours of automated scanning and described a content-transmission software vulnerability reachable through web pages and interfaces. No specific CVE, product, or technical indicator is named in the source, and the attacker claims in Iraq and China are described as less firmly corroborated. Hunters should review internet-exposed digital signage management interfaces and content-publishing systems for unauthorized access.