BRIEFAccess salehighP72
LATAM debt collection firm access for sale: webshell and SSH root
Empresa de cobranza/robocaller LATAM
Detected3 October 2026 · 08:02 UTC
A seller is offering a webshell plus SSH root access to a Latin American debt-collection/robocall company, indicating full server compromise. This matters because it grants persistent privileged access to a region-relevant organization that handles large volumes of consumer PII, enabling fraud, spam, or lateral movement. Web shell + root is high-value initial access worth monitoring.
CategoryAccess sale
Severityhigh
Priority score72
Detected3 October 2026 · 08:02 UTC
Access sale● 56
Venta de 535 accesos a paneles cPanel (admin y usuario)A DarkForums seller is offering 535 cPanel credentials split between admin and user accounts, posted about four hours before collection. Hosting control-panel access lets an attacker deploy webshells, deface sites and pivot to mail or databases on the same server. Any org hosted on shared cPanel infrastructure should test these credentials and rotate keys.Access sale● 42
Venta de acceso de administrador a la Universidad Técnica de Cluj-NapocaAn actor advertises administrative access to utcluj.ro, the Technical University of Cluj-Napoca in Romania. Website admin access typically enables defacement, data theft and lateral movement into university infrastructure. It is a legitimate access-sale indicator, though the target lies outside the AR-LATAM region.Access sale● 80
Venta de acceso al sistema de nómina de las Fuerzas Armadas de MalasiaA seller is offering access to the payroll system of the Malaysian Armed Forces, a national military target. If genuine, this exposes personnel records, salary data and internal systems, enabling fraud and further intrusion. Military payroll access is a high-value initial-access commodity that defenders should treat as a priority lead.Access sale● 45
Acceso de administrador a servicio francés de alojamiento empresarialA vendor is selling administrator access to a French business-accommodation service platform. Admin access exposes customer records and backend infrastructure, enabling data theft and onward intrusion. The buyer can pivot to the platform's corporate clients.Access sale● 60
Acceso de administrador a sitio web del gobierno de Indonesia a la ventaA seller is offering administrative access to ciptakarya.pu.go.id, an Indonesian government portal. Full admin control of a public-sector site enables defacement, data theft, and use as a pivot into internal systems. Defenders should treat it as a confirmed gov-site compromise and check for similar credentials or webshells.Access sale● 76
Base de datos y acceso admin del sitio bppra.gob.pk a la ventaA seller is offering a database plus administrative access for bppra.gob.pk, a Pakistani government procurement authority. Admin access to a government web platform enables data exfiltration, defacement and lateral movement into related public infrastructure. Government procurement portals hold supplier and citizen data, so this should be treated as an active breach.