BRIEFAccess salehighP62
Buyer seeking data from Argentina's Bull Market Brokers
Bull Market Brokers (inversiones.bullmarket.com.ar)
Detected18 September 2026 · 04:12 UTC
A buyer on DarkForums is soliciting valid leads or credentials tied to inversiones.bullmarket.com.ar, an Argentine brokerage. This signals active interest in compromising an Argentine financial-sector target, likely via credential stuffing or account takeover. Defenders at the firm should watch for brute-force, phishing and anomalous logins.
CategoryAccess sale
Severityhigh
Priority score62
Detected18 September 2026 · 04:12 UTC
Access sale● 42
Dump y acceso admin de alifyaeducation.co.uk a la ventaA fresh listing offers a dumped database plus administrative access for alifyaeducation.co.uk. Admin access allows full site takeover, data theft and abuse of the host for further attacks. Even a small education target is a useful pivot for phishing and hosting infrastructure.Access sale● 70
Filtración y acceso de administrador a la base de datos de personal de Xarxa Tecla (SISCAT)A threat actor is leaking a personnel database from xarxatecla.cat (SISCAT) while offering associated email and admin access. This combines a data leak with privileged access to a Catalan telecom/technology network, enabling follow-on intrusion. Privileged access plus PII raises both fraud and lateral-movement risk.Access sale● 45
Venta de acceso admin WordPress al Ministerio de Educación de UgandaA seller is offering administrative WordPress access to the Uganda Ministry of Education's website. Government CMS takeovers enable defacement, malware or phishing hosting under an official domain, and can serve as a pivot into connected government infrastructure, so it should be validated and monitored.Access sale● 45
Venta de acceso al sistema de causas judiciales de un país africanoA seller is offering access to a government court-case system in an African country, an initial-access sale to a public-sector target. Although outside the AR-LATAM focus, it demonstrates a live vendor offering judicial-system access that regional CTI teams should track as a capability. No date is given, so treat it as time-sensitive but unverified.Access sale● 35
Comprador busca correos de gobiernos en foro clandestinoA user on DarkForums posted a request to buy government email accounts, a demand signal for access to public-sector mailboxes. Such buyers typically pursue espionage, invoice fraud or further intrusion via trusted government addresses. No specific victim is named, so impact is potential rather than confirmed.Access sale● 61
Venta de acceso a la base de datos del hospital de la Fuerza Terrestre del IRGC (Irán)A seller on BreachForums is offering full database access to the IRGC Ground Force Hospital, a military medical facility. Selling direct database access to a named military target is a high-value access offering, not generic chatter, and could enable further intrusion or extortion. CTI teams tracking regional military/healthcare threats and any partners with Iranian exposure should monitor this listing.