Cato CTRL™ Threat Actor Profile: IntelBroker
ID: b0ca323a-40db-5208-9bb3-14dbe56e9b28
STIX ID: report--b0ca323a-40db-5208-9bb3-14dbe56e9b28
Feed Name: Cato Networks
In June 2025, law enforcement charged Kai Logan West (alias IntelBroker) after linking him to a sophisticated BreachForums data-broker operation that from December 2022–February 2025 caused over $25M in damages across 40+ victims; the report details his exploitation of misconfigured servers, API weaknesses and third-party compromises, how OPSEC failures (wallet/KYC linkage, email reuse, IP and behavioral correlations) enabled definitive attribution, BreachForums operational metrics, and the international arrests and indictments that disrupted the stolen-data marketplace.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.