BRIEFAccess salehighP82
Access to South American corporation worth $10-30M for sale
Detected15 November 2026 · 07:14 UTC
A seller on DarkForums is offering access to a South American corporation with estimated revenue of $10-30M, a high-value corporate intrusion pitched to cross-border buyers. The exact victim, access method and privileges are not disclosed, but the offer could enable ransomware or fraud. Regional enterprises should verify external exposure and monitor for credential abuse.
CategoryAccess sale
Severityhigh
Priority score82
Detected15 November 2026 · 07:14 UTC
Access salePriority 85
Venta de datos del Ministerio de Relaciones Exteriores de BoliviaA seller on BreachForums is advertising material tied to Bolivia's Ministry of Foreign Affairs, a national government body handling diplomacy and consular affairs. Any leak or access sale of a foreign ministry exposes diplomatic communications, citizen passport/consular records and staff credentials, raising risks of targeted phishing and state-adjacent espionage. Defenders in Bolivia's public sector and neighboring LATAM ministries should treat this as a priority governance and data-protection incident.Access salePriority 84
Venta de acceso a la Policía Civil de BrasilBreachForums seller bl33dr00t is advertising access or data linked to a Brazilian Civil Police agency in a thread posted in mid-November 2026. Law-enforcement records and access to police systems are among the most sensitive targets, enabling doxxing of officers, tampering with investigations and lateral movement into government networks. The offer is recent and needs urgent verification by the affected agency.Access salePriority 32
Plataforma india de cripto cryptocollect.in comprometidaA DarkForums marketplace listing advertises the compromise of cryptocollect.in, an Indian crypto collection platform, likely offering stolen data or access. Crypto payment platforms hold wallet and customer records whose leakage enables fraud and account takeover of investors. The listing provides no sample or scope, so it is a low-confidence, low-scale claim worth only monitoring.Access salePriority 48
Venta de acceso al panel de administración de adch.ac.inA seller on DarkForums is offering administrative panel access to adch.ac.in, an Indian academic institution website, in a post dated 14 November 2026. Web admin access allows defacement, data theft or hosting of malicious content and can be a stepping stone into the internal network. The domain is named explicitly, so defenders can check for compromise immediately.Access salePriority 48
Venta de acceso a correo de la oficina de Thai Airways en PakistánA seller is offering email access to the Pakistan office of Thai Airways in a marketplace access-sale listing. Corporate email access enables business email compromise, invoice fraud and lateral movement against partners and travel agents. Airline accounts are valuable for ticket fraud and supply-chain phishing.Access salePriority 55
Se ofrece a la venta suite de exploit zero-click Pegasus v5.2.1 para iOS y AndroidA seller on DarkForums advertises a claimed full Pegasus v5.2.1 zero-click suite for iOS and Android, purportedly derived from an NSO Group leak. If authentic it would provide turnkey remote device compromise capability attractive to government-facing threat actors, though such posts are frequently scams. Defenders of high-value government and executive mobile targets should treat it as a reminder of mercenary spyware risk.