BRIEFAccess salehighP78
Admin access and defacement at Universidad César Vallejo (Peru)
ucv.edu.pe (Universidad César Vallejo, Perú)
Detected12 September 2026 · 01:12 UTC
Threat actor Keishell posted admin-level access to ucv.edu.pe, the Universidad César Vallejo in Peru, along with a website defacement, claiming over 200,000 students affected. This exposes student PII, staff credentials and internal systems to further intrusion or fraud. A large Latin American university is a valuable target for both data theft and reputational disruption.
CategoryAccess sale
Severityhigh
Priority score78
Detected12 September 2026 · 01:12 UTC
Access sale● 38
Publicación gratuita de accesos root a paneles cPanel/WHMThe actor 'ROOT SYSTEM' published a free 'community drop' of cPanel/WHM root-level access on the DarkNetArmy forum within the last hour, freshly posted today. Even without named victims, bulk root access to hosting panels lets attackers deface sites, deploy phishing, or reach the mail, databases and billing of every account on the affected servers. Because the access is being given away, exposure is likely to spread quickly to low-skilled actors, so hosting providers should hunt for unauthorized cPanel logins now.Access sale● 71
Venta de acceso al portal de la Policía de Rajastán (India)A seller on the BreachForums marketplace is offering material tied to police.rajasthan.gov.in, a state police portal on a .gov.in domain. Law-enforcement portals are high-value targets because they concentrate officer and citizen PII and often serve as a pivot into wider government networks. The listing does not state whether the item is web-shell access, VPN credentials or a database dump, so scope and freshness must be verified before alerting victims.Access sale● 55
Venta de accesos a 7 bases de datos y shell en CanadáA BreachForums actor is selling seven database accesses together with shell access for Canadian targets. Combined database and web-shell access lets an attacker exfiltrate records and maintain persistence once sold. Organizations in Canada should verify exposed systems and rotate credentials.Access sale● 78
Venta de 2TB de datos y panel de superadministrador del Gobierno de KuwaitA seller on the PwsForums marketplace is advertising roughly 2TB of data together with a 'Super Administrator-Panel' attributed to the Kuwaiti Government, implying both bulk exfiltration and privileged access to a national portal. Administrative panels of this kind typically expose citizen records, internal staff accounts and connected downstream systems, which makes the offer valuable to state-linked or financially motivated buyers. The exact scope, date of compromise and sample data are unverified, so defenders should treat any Kuwaiti government-facing panel as potentially compromised until proven otherwise.Access sale● 40
Panel de administración y base de datos de un NAS Thecus expuestosA Cracked.st thread offers a database and administrative panel for a Thecus NAS device with a Spanish-language interface, indicating a compromised storage appliance. Such devices typically hold backups and internal files, so leaked admin access can cascade into deeper network compromise. Defenders running Thecus NAS, especially Spanish-speaking organizations, should verify whether they are exposed.Access sale● 50
ShadowByt3 vende acceso rápido al sistema de facturación de RyderThe ShadowByt3 Group is advertising quick initial access into 'Ryder's Invoicing', a target invoicing platform, on a darkweb forum. Selling ready-made access lets ransomware or fraud operators skip the break-in, raising the chance of a rapid follow-on compromise. Organizations relying on such invoicing systems should verify authentication and network exposure.