BRIEFAccess salehighP70
South America corporate data leak part 3: Argentina, Brazil, Chile
South America corporations (Argentina, Brazil, Chile)
Detected2 July 2026 · 14:55 UTC
Targeted combolist of corporate credentials from Argentina, Brazil, and Chile, likely for initial access to companies.
CategoryAccess sale
Severityhigh
Priority score70
Detected2 July 2026 · 14:55 UTC
Access sale● 46
Servicio vende correos de gobierno y gestiona suspensión de dominiosA BreachForums vendor advertises access to government email accounts alongside handling of Emergency Disclosure Requests and removal or suspension of domains. If genuine, it implies privileged access to official mailboxes that could be used for impersonation or BEC against public-sector contacts. The listing gives no country or entity, so it is a capability to monitor rather than a confirmed AR/LATAM incident.Access sale● 48
Venta de acceso admin a joacademy.com (Jordania)A threat actor is selling administrator access to groups.joacademy.com, a Jordanian education platform. Admin access allows data exfiltration, account takeover and abuse of the site's user base. Website operators in the region should review access controls and rotate privileged credentials.Access sale● 56
Venta de acceso al portal gubernamental de PunjabA threat actor is advertising access to dsjlahore.punjab.gov.pk, a Pakistan Punjab government judicial portal. Government portal access enables data theft or defacement and can serve as a foothold for deeper intrusions into public administration networks. Public-sector defenders should audit exposed admin interfaces and rotate credentials.Access sale● 55
Venta de acceso admin a portal del gobierno de Filipinas (cda.gov.ph)An actor is selling administrative access to cs.cda.gov.ph, a Philippine government portal belonging to the Cooperative Development Authority. Government-portal admin access enables data theft, defacement or lateral movement into public infrastructure. Although outside the AR-LATAM region, it is a fresh and concrete government initial-access sale worth tracking.Access sale● 40
Venta de webshells para abuso de posicionamiento SEOThe actor is selling bulk web shells advertised for SEO abuse, indicating compromised sites resold as a commodity. Buyers can inject spam, redirects and malware into the hijacked sites. Site owners should monitor for unauthorized content and indicators of compromise.Access sale● 48
Venta de acceso webshell al dominio educativo edu.ua (CCS Education)A web shell is for sale for the edu.ua (CCS Education) domain, a Ukrainian education target. This grants persistent remote access to deface, host malware or exfiltrate student and staff data. Education networks should hunt for web shells and patch exposed CMS and plugins.