BRIEFAccess salelowP35
Buyer seeking government email accounts on underground forum
Detected17 September 2026 · 04:12 UTC
A user on DarkForums posted a request to buy government email accounts, a demand signal for access to public-sector mailboxes. Such buyers typically pursue espionage, invoice fraud or further intrusion via trusted government addresses. No specific victim is named, so impact is potential rather than confirmed.
CategoryAccess sale
Severitylow
Priority score35
Detected17 September 2026 · 04:12 UTC
Access sale● 61
Venta de acceso a la base de datos del hospital de la Fuerza Terrestre del IRGC (Irán)A seller on BreachForums is offering full database access to the IRGC Ground Force Hospital, a military medical facility. Selling direct database access to a named military target is a high-value access offering, not generic chatter, and could enable further intrusion or extortion. CTI teams tracking regional military/healthcare threats and any partners with Iranian exposure should monitor this listing.Access sale● 72
Venta de acceso OT a un PLC SLC 500 en PoloniaA seller is offering dual-surface OT access bundling an Allen-Bradley SLC 500 PLC with an L2TP VPN foothold in Poland. Control of industrial PLCs lets an attacker manipulate physical processes, so manufacturing and critical-infrastructure defenders should assume this foothold could be resold or weaponized.Access sale● 42
Acceso al panel de administración del sitio español legaliti.esA forum user is offering administrator information and the admin email for the Spanish legal website legaliti.es, indicating a compromise of its backend or admin account. Admin access enables defacement, data theft, malware injection and abuse of the site's visitors. Spain is in scope for Spanish-language monitoring and this is a fresh, actionable access listing.Access sale● 64
Venta de acceso a PLC industrial CompactLogix en AustriaA seller is offering live read/write access to a CompactLogix 5069 PLC with 274 tags in an Austrian industrial environment. Such access allows manipulation of physical processes, posing a serious OT/ICS safety and availability risk. Though outside Latin America, it signals active brokering of industrial control access relevant to critical-infrastructure defenders.Access sale● 48
Filtración de una máquina virtual de la exchange Gate.ioA leaked virtual machine image allegedly belonging to the crypto exchange Gate.io was posted on a Russian-language forum, potentially containing configuration, credentials or keys from the platform's infrastructure. Such artifacts can enable initial access or lateral movement against a major financial platform. Exchanges are high-value targets due to the potential for direct fund theft.Access sale● 68
Venta de acceso admin a una plataforma internacional de apuestasA seller is offering admin access to a major international sportsbook platform, posted within the last day. Administrative access could allow manipulation of bets, payouts and user accounts, plus access to customer PII and financial data. Fresh access sales of this type are highly time-sensitive.