BRIEFAccess salelowP40
Mail;Pass 128.7k Corp SMTP Target | Niflheim World
Detected25 June 2026 · 12:24 UTC
Corporate SMTP target access for sale, but no specific victim or region identified.
CategoryAccess sale
Severitylow
Priority score40
Detected25 June 2026 · 12:24 UTC
Access sale● 78
Venta de acceso al servidor de producción de Lion Air con RCEA threat actor is selling production server access with remote code execution for Lion Air, an Indonesian airline. RCE on production infrastructure enables full data theft, ransomware deployment or service disruption. Airlines are critical infrastructure, so buyers could pivot to booking, customer and operational systems.Access sale● 40
Venta de acceso RDP con privilegios de administradorA seller is advertising remote desktop (RDP) access with administrative privileges. Such access is a common initial-access vector for ransomware and lateral movement. No specific victim is named, so it is not attributable, but it signals active access brokering worth monitoring.Access sale● 55
Venta de acceso al servidor de correo corporativo de Lion AirA seller is offering access to Lion Air's corporate mail server, a fresh initial-access offer posted within minutes. Corporate email access enables business email compromise, internal phishing and lateral movement into the airline's systems. Although outside the AR-LATAM region, it is a named high-value target and warrants monitoring for re-sale or regional partner exposure.Access sale● 28
Venta de acceso de administrador a wanderlustadventure.com.in (India)An actor is selling admin access to wanderlustadventure.com.in, an Indian travel site, in a listing posted minutes ago. Admin-panel access enables defacement, data theft and use of the site for further abuse. It is a low-value regional target, but the freshly sold access warrants basic monitoring.Access sale● 32
Venta de acceso de administrador al backend de hoteligy.com (España)A seller is offering admin access to the backend of hoteligy.com, a Spanish hospitality website, posted minutes ago. Backend access lets an attacker exfiltrate customer and booking data or deface the site. Spanish-speaking defenders should validate the claim and review web-facing admin panels for compromise.Access sale● 45
Venta de acceso de administrador a la Universidad Técnica de Cluj-NapocaA threat actor is advertising administrative access to utcluj.ro, the Romanian Technical University of Cluj-Napoca, posted today. Selling admin access to a university enables data theft, ransomware staging and abuse of student and research systems. The institution should rotate credentials and audit for unauthorized admin sessions.