BRIEFAccess salehighP80
Sale of government and police email accounts from multiple countries
Government & Law Enforcement Email Accounts (Multiple Countries)
Detected16 July 2026 · 14:39 UTC
Email accounts of government officials and law enforcement personnel from multiple countries, potentially including Argentine agencies, are being sold. This unauthorized access to official communications enables espionage, sensitive information leaks, and targeted phishing attacks. It poses a high risk to national and institutional security.
CategoryAccess sale
Severityhigh
Priority score80
Detected16 July 2026 · 14:39 UTC
Access sale● 66
Venta de exploit zero-click para iOS y AndroidA seller is offering a zero-click exploit chain affecting iOS 13 through 26.4.2 and Android 7 through 17, which, if real, allows remote compromise without user interaction. Such capability is high-value for targeted surveillance and espionage against mobile devices. Defenders should treat this as a potential unpatched mobile threat.Access sale● 38
Venta de acceso root a un servidor no identificadoAn actor is advertising root access to an unnamed server for sale. No victim organisation, country or access type is specified, which limits its immediate investigative value, but root access sales frequently precede ransomware or data theft. Monitoring the seller may reveal the target during negotiation.Access sale● 78
Venta de acceso al servidor de producción de Lion Air con RCEA threat actor is selling production server access with remote code execution for Lion Air, an Indonesian airline. RCE on production infrastructure enables full data theft, ransomware deployment or service disruption. Airlines are critical infrastructure, so buyers could pivot to booking, customer and operational systems.Access sale● 40
Venta de acceso RDP con privilegios de administradorA seller is advertising remote desktop (RDP) access with administrative privileges. Such access is a common initial-access vector for ransomware and lateral movement. No specific victim is named, so it is not attributable, but it signals active access brokering worth monitoring.Access sale● 55
Venta de acceso al servidor de correo corporativo de Lion AirA seller is offering access to Lion Air's corporate mail server, a fresh initial-access offer posted within minutes. Corporate email access enables business email compromise, internal phishing and lateral movement into the airline's systems. Although outside the AR-LATAM region, it is a named high-value target and warrants monitoring for re-sale or regional partner exposure.Access sale● 28
Venta de acceso de administrador a wanderlustadventure.com.in (India)An actor is selling admin access to wanderlustadventure.com.in, an Indian travel site, in a listing posted minutes ago. Admin-panel access enables defacement, data theft and use of the site for further abuse. It is a low-value regional target, but the freshly sold access warrants basic monitoring.