BRIEFAccess salehighP70
Stradu's DB MARKET CLOUD: 1.1TB, 35B unique mail:pass combos
Detected2 July 2026 · 13:55 UTC
Massive 1.1TB/35B email:pass combo list available for sale, posing credential stuffing risk globally.
CategoryAccess sale
Severityhigh
Priority score70
Detected2 July 2026 · 13:55 UTC
Access sale● 40
Venta de webshells para abuso de posicionamiento SEOThe actor is selling bulk web shells advertised for SEO abuse, indicating compromised sites resold as a commodity. Buyers can inject spam, redirects and malware into the hijacked sites. Site owners should monitor for unauthorized content and indicators of compromise.Access sale● 48
Venta de acceso webshell al dominio educativo edu.ua (CCS Education)A web shell is for sale for the edu.ua (CCS Education) domain, a Ukrainian education target. This grants persistent remote access to deface, host malware or exfiltrate student and staff data. Education networks should hunt for web shells and patch exposed CMS and plugins.Access sale● 50
Venta de acceso webshell a una plataforma de trading Web3 con IAThe seller offers a web shell on an AI-powered Web3 automated trading platform, exposing the server and potentially customer funds and API keys. Such access enables data theft, wallet tampering and lateral movement into backend infrastructure. Web3 platforms should audit file integrity and rotate secrets.Access sale● 52
Venta de acceso webshell a una empresa de lotería y tecnología de VietnamA threat actor is selling webshell access to a Vietnamese lottery and technology company, giving code execution and a persistent backdoor on the victim's web server. Web shells let attackers steal data, pivot into internal networks and deface or ransom the site. Defenders at similar firms should scan for web-shell artifacts and review server logs for unauthorized uploads.Access sale● 66
Venta de exploit zero-click para iOS y AndroidA seller is offering a zero-click exploit chain affecting iOS 13 through 26.4.2 and Android 7 through 17, which, if real, allows remote compromise without user interaction. Such capability is high-value for targeted surveillance and espionage against mobile devices. Defenders should treat this as a potential unpatched mobile threat.Access sale● 38
Venta de acceso root a un servidor no identificadoAn actor is advertising root access to an unnamed server for sale. No victim organisation, country or access type is specified, which limits its immediate investigative value, but root access sales frequently precede ransomware or data theft. Monitoring the seller may reveal the target during negotiation.