BRIEFAccess salehighP61
Access to IRGC Ground Force Hospital database for sale
IRGC Ground Force Hospital (Iran)
Detected17 September 2026 · 01:12 UTC
A seller on BreachForums is offering full database access to the IRGC Ground Force Hospital, a military medical facility. Selling direct database access to a named military target is a high-value access offering, not generic chatter, and could enable further intrusion or extortion. CTI teams tracking regional military/healthcare threats and any partners with Iranian exposure should monitor this listing.
CategoryAccess sale
Severityhigh
Priority score61
Detected17 September 2026 · 01:12 UTC
Access sale● 72
Venta de acceso OT a un PLC SLC 500 en PoloniaA seller is offering dual-surface OT access bundling an Allen-Bradley SLC 500 PLC with an L2TP VPN foothold in Poland. Control of industrial PLCs lets an attacker manipulate physical processes, so manufacturing and critical-infrastructure defenders should assume this foothold could be resold or weaponized.Access sale● 42
Acceso al panel de administración del sitio español legaliti.esA forum user is offering administrator information and the admin email for the Spanish legal website legaliti.es, indicating a compromise of its backend or admin account. Admin access enables defacement, data theft, malware injection and abuse of the site's visitors. Spain is in scope for Spanish-language monitoring and this is a fresh, actionable access listing.Access sale● 64
Venta de acceso a PLC industrial CompactLogix en AustriaA seller is offering live read/write access to a CompactLogix 5069 PLC with 274 tags in an Austrian industrial environment. Such access allows manipulation of physical processes, posing a serious OT/ICS safety and availability risk. Though outside Latin America, it signals active brokering of industrial control access relevant to critical-infrastructure defenders.Access sale● 48
Filtración de una máquina virtual de la exchange Gate.ioA leaked virtual machine image allegedly belonging to the crypto exchange Gate.io was posted on a Russian-language forum, potentially containing configuration, credentials or keys from the platform's infrastructure. Such artifacts can enable initial access or lateral movement against a major financial platform. Exchanges are high-value targets due to the potential for direct fund theft.Access sale● 68
Venta de acceso admin a una plataforma internacional de apuestasA seller is offering admin access to a major international sportsbook platform, posted within the last day. Administrative access could allow manipulation of bets, payouts and user accounts, plus access to customer PII and financial data. Fresh access sales of this type are highly time-sensitive.Access sale● 76
Venta de acceso corporativo a una empresa de BrasilA seller on DarkForums is advertising corporate access to a Brazilian organization, posted within the last day. The victim is unnamed, so Brazilian private-sector defenders should treat it as a credible intrusion offer and review exposed remote access and stolen credentials. Regional corporate access sales frequently precede ransomware deployment.