BRIEFAccess salehighP50
Costa Rica online shop admin access for sale
factoa.net
Detected31 October 2026 · 10:24 UTC
A DarkForums seller offers administrative access to factoa.net, an e-commerce site in Costa Rica, under 'Source Codes'. Admin panel access allows data theft, payment manipulation and defacement of a Latin American business. The operator should immediately rotate credentials and audit for unauthorized changes.
CategoryAccess sale
Severityhigh
Priority score50
Detected31 October 2026 · 10:24 UTC
Access sale● 54
Acceso a cuentas del banco Caixa Geral de Depósitos, PortugalA DarkForums post sells access to roughly 1,878 accounts tied to Caixa Geral de Depósitos, Portugal's state-owned bank, out of a 31.10K listing. Compromised online-banking credentials enable unauthorized transfers and account takeover. The bank and its customers should treat affected credentials as compromised and review fraud controls.Access sale● 45
Venta de acceso de administrador a groups.joacademy.com (Jordania)A seller on DarkForums is advertising administrative access to the Jordanian site groups.joacademy.com. Admin-level access to a live web property enables data theft, defacement, or use as a pivot, though the target appears to be a small education platform. It is a confirmed, time-relevant initial-access offer rather than a stale listing.Access sale● 78
Filtración de accesos GitLab de gobiernos de varios paísesA DarkForums user (Pryhotir) posted what is described as leaked GitLab access belonging to government organizations in several countries, published on October 30, 2026. Repository access of this kind exposes source code, CI/CD secrets, internal credentials and documents that can be chained into deeper intrusion. Although no Latin American entity is explicitly named, any public-sector GitLab instance should verify whether its credentials appear in the release.Access sale● 68
Acceso a GitLab de gobiernos de varios países publicadoA DarkForums user published credentials/access tied to GitLab instances belonging to several national governments. Government source-code repositories typically expose internal applications, secrets and CI/CD tokens that enable deeper intrusion. The post does not specify which countries, so LATAM agencies running self-hosted GitLab should urgently audit authentication logs and rotate keys.Access sale● 48
Acceso cPanel al sitio saudí saj.org.sa en ventaUser Phyvuval offered working cPanel credentials for the Saudi domain saj.org.sa, a hosting-panel compromise that typically allows webshell deployment, mail interception and defacement. Panel access is a stepping stone to phishing infrastructure on a trusted domain and can expose site databases. Single-site cPanel sales are lower impact than corporate VPN access but still actionable if the domain is used for official communications.
Access sale● 76
Acceso al sistema de nóminas de las Fuerzas Armadas de MalasiaA DarkForums post by user Ixtenor advertises access tied to the Malaysian Armed Forces payroll system, one of the most sensitive HR and finance platforms of a national military. Payroll systems concentrate service numbers, bank accounts and salary data for uniformed personnel, which enables fraud, insider targeting and espionage. Even if unverified, it should be checked against any defence-sector credentials or vendor portals exposed in recent stealer logs.