BRIEFAccess salehighP66
19,320 accesses to the Malaysian government offered on DarkForums
Malaysian government
Detected1 November 2026 · 02:24 UTC
Reposts collapsed2
A DarkForums thread advertises the sale of 19,320 accesses tied to the Malaysian government; the body is behind a login wall so the exact nature (credentials, URLs, VPN or panel access) is unverified. If confirmed, this is a bulk batch of entry points into state systems, valuable for intrusion, data theft and espionage. It falls outside Latin America but shows how large government access lots are being marketed.
CategoryAccess sale
Severityhigh
Priority score66
Detected1 November 2026 · 02:24 UTC
Access sale● 72
Venta de acceso admin a AWS y base de datos de producción (UE)A seller on BreachForums is offering administrative access to a corporate AWS analytics environment plus credentials for a production database, advertised as ready for business email compromise. This is hands-on-keyboard level access to cloud infrastructure and live data, which if purchased allows direct exfiltration, ransomware staging or fraud against the unnamed EU company. Buyers already holding this access represent an immediate risk to the victim and to any partner sharing that cloud tenancy.Access sale● 52
Venta de acceso admin completo a un hotel: web, correo, BD y FTPA seller on the PWN forum is offering administrative access to a hotel with roughly one million in revenue, including full webhosting, mail, database and FTP access. This level of access enables data theft and ransomware deployment against the target and its booking customers.Access sale● 72
Venta de 0-day crítico y 10 millones de datos fiscales de IndonesiaA DarkForums seller advertises a 'critical 0-day' claimed to yield full network compromise plus more than 10 million taxpayer records from Indonesia's tax administration. Offers that bundle an unpatched vulnerability with a demonstrated network foothold and bulk citizen tax data are among the most consequential underground listings, because the 0-day may be reusable against other deployments. Even if partly inflated, it warrants immediate validation by the named agency and by vendors of the implicated software.Access sale● 55
Acceso de administrador a la plataforma cripto cryptomia.net a la ventaA DarkForums thread advertises administrative access to cryptomia.net, a cryptocurrency services platform, indicating control over the site's backend panel. Admin access to a crypto service can let an attacker manipulate balances, user data and withdrawals. Operators of similar platforms should rotate credentials, review access logs and enforce MFA.Access sale● 72
Acceso a portal de clientes de distribuidora farmacéutica a la ventaA DarkForums marketplace seller is offering client-portal access to an unnamed pharmaceutical distributor, bundled with roughly 70,000 financial documents and an active unpatched vulnerability. Portal access exposes orders, invoicing and customer data and serves as a foothold for deeper intrusion. Pharma distributors should audit external portals and remediate reported flaws.Access sale● 50
Acceso de administrador a tienda online de Costa Rica a la ventaA DarkForums seller offers administrative access to factoa.net, an e-commerce site in Costa Rica, under 'Source Codes'. Admin panel access allows data theft, payment manipulation and defacement of a Latin American business. The operator should immediately rotate credentials and audit for unauthorized changes.