BRIEFAccess salehighP62
Access to Turkish government portal its.gov.tr for sale
its.gov.tr (Turquía)
Detected19 September 2026 · 15:12 UTC
A seller is advertising access to the Turkish government subdomain paydas.its.gov.tr, posted on 2026-09-16. Government portal access can enable data theft, service abuse or lateral movement into other public-sector systems. It is a named high-value government target, so defenders tracking state-sector exposure should note it even though it is outside Latin America.
CategoryAccess sale
Severityhigh
Priority score62
Detected19 September 2026 · 15:12 UTC
Access sale● 62
Venta de acceso a empresa de VFX de EE. UU. con ingresos de 202 M$An actor on the Pwn Forum is advertising initial access to a US visual-effects company reportedly generating $202M in revenue. The listing sits behind a login wall, so the access vector, price and proof are undisclosed, but access to a firm of this size could enable ransomware deployment or large-scale data theft.Access sale● 72
Datos de 656.000 personas y acceso al sistema de la Universidad de Hong KongA DarkForums listing claims 656,000 personal records from Hong Kong Metropolitan University plus access to its internal systems, combining a bulk data leak with a network foothold. University systems hold student, staff and research data, and access sales often precede ransomware or further intrusions against academic and public institutions in the region. The post date and proof samples were not visible, so recency and authenticity still need confirmation before escalation.Access sale● 78
Venta de acceso completo a la infraestructura del distrito municipal de Jinzhou (China)A seller on DarkNetArmy is advertising full infrastructure access to a Chinese municipal government district, including digital access to sensitive internal data. Government-grade access of this kind enables data theft, lateral movement and potential disruption of public services. It is a named, high-value government target that warrants monitoring even outside the LATAM region.Access sale● 38
Acceso a sistemas Windows con datos del sector salud de IránA poster on DarkForums claims to have gained access to Windows systems containing Iranian healthcare sector data and is offering it via a dox thread. Healthcare environments hold sensitive patient records and often run legacy Windows hosts prized by ransomware crews. Any confirmed access to Iranian health infrastructure raises risk of data theft and service disruption.Access sale● 88
Venta del sistema vehicular de la Ciudad de MéxicoThreat actor 'cenfecracked' is advertising the sale of Mexico City's vehicular system on DarkForums in a post dated 2 November 2026, implying access to or data from a municipal vehicle-registration/transport platform. Such systems hold owner PII, plate and verification records and support government services, so a compromise enables identity fraud and service disruption. It directly targets Latin American public infrastructure, making it a priority for regional defenders.Access sale● 45
Venta de acceso a una empresa comercial de OmánA Tor forum post advertises initial access to an Oman-based trading company. Purchased access to a named corporate target often precedes ransomware or business email compromise. Regional firms should review remote-access controls and authentication logs.