BRIEFOtherhighP45
KYC bypass tool sold to defeat Sumsub, Onfido, Jumio
Detected9 October 2026 · 14:22 UTC
A seller on Cracked.st offers a KYC-bypass and document-forgery toolkit claiming to defeat major identity vendors including Sumsub, Onfido, Persona, Jumio, Idnow, Veriff and Ondato. This directly enables fraudulent account opening and money laundering at banks and fintechs relying on those providers. Defenders should expect forged onboarding attempts and tighten document and liveness checks.
CategoryOther
Severityhigh
Priority score45
Detected9 October 2026 · 14:22 UTC
Other● 42
FBI advierte sobre ataques FortiBleed contra VPNs FortiGateA darknet news repost relays an FBI advisory about ongoing 'FortiBleed' attacks that lock out administrators of FortiGate SSL-VPN appliances, an edge device widely deployed in government, telecom and critical-infrastructure networks. Defenders relying on FortiGate VPNs for remote access should patch urgently, hunt for persistence and rotate credentials. No Latin American victim is named yet, but the campaign is global and directly relevant to AR/LATAM perimeter security.Other● 40
Comprador busca cuentas bancarias de Chile y ColombiaA carding-forum user is actively seeking bank accounts from Chile and Colombia, explicitly referencing logos from Banco de Bogotá and Santander Chile. This signals ongoing demand for LatAm banking access and credentials that fuels account-takeover and fraud. It is a demand-side solicitation, not a confirmed breach, so treat it as context rather than a fresh compromise.Other● 82
Venta de exploit 0-day de Chromium para Android 14-16A DarkForums seller is offering a full-chain Chromium remote code execution exploit for Android 14-16, billed as 0-day class. If real, it enables drive-by compromise of most Android devices via the browser with no patch available. Defenders should treat it as a high-risk weaponized exploit and watch for mobile targeting.Other● 45
SDK bancario de reconocimiento facial antifraude revertido con clave de bypass expuestaA dark web actor published a fully reversed bank facial-recognition SDK, including nine keywords and a bypass key in clear. This anti-fraud module verifies identity in banking apps, so its circulation lowers the bar to evade biometric checks and commit account-takeover or onboarding fraud. Banks relying on such SDKs should audit their biometric flows.Other● 35
Venden cuentas bancarias y KYC, incluida ArgentinaA vendor advertises cheap 'openups', bank accounts and KYC packages for Argentina and a dozen other countries, enabling fraudulent account creation and money laundering. Relevant for monitoring fraud against the Argentine financial sector, though it is a long-running service ad rather than a fresh breach.Other● 34
Herramienta de elusión de KYC y generación de documentos falsosA tool is being shared that automates KYC bypass and document generation against vendors such as Sumsub, Onfido, Persona, Ondato and Veriff. It lowers the barrier for identity fraud and account opening with forged documents at banks and fintechs relying on those providers. Defenders in financial onboarding should treat it as an active fraud enabler.