BRIEFAccess salelowP38
VM access to crypto exchange Criptan put up for sale
Criptan.com
Detected3 October 2026 · 17:03 UTC
A forum user is offering a virtual machine reportedly taken from Criptan, a Spanish-regulated cryptocurrency exchange, with a post date in early 2026. If genuine, the image could expose API keys, wallet access or customer data of a financial entity. However the post is months old, so it is not a fresh alert and should be treated as background intelligence for Spanish financial-sector defenders.
CategoryAccess sale
Severitylow
Priority score38
Detected3 October 2026 · 17:03 UTC
Access sale● 55
Acceso completo a la aseguradora Hosn Al Sharjah (EAU) en ventaA forum user claims to have compromised Hosn Al Sharjah, a UAE insurance provider, and is offering full SMB access. Unauthorized access to an insurer risks customer PII and policy data. The claim is unverified but is a live access offer worth tracking.Access sale● 64
Venta de acceso corporativo a GNC Corp (Tanzania)A seller on a darkweb marketplace is offering corporate network access to GNC Corp in Tanzania, posted within the last day. Although outside Latin America, it is a live initial-access offer against a named company that could enable intrusion, fraud or lateral movement depending on the privileges obtained. Access brokers routinely resell such footholds to ransomware crews, so defenders should monitor even if the target's regional relevance is limited.Access sale● 44
Venta de acceso a la empresa asiática de robótica Big Asia RobotsAn access broker is offering initial access to Big Asia Robots Company, a robotics vendor reportedly generating over 70 million in revenue. The post dates to July 2026, so it is no longer fresh, but it still indicates a real corporate network being monetized. Robotics firms are high-value footholds for supply-chain and lateral-movement operations, so affected partners should check exposure.Access sale● 55
Venta de acceso a la empresa surcoreana KaoKao MobilityA seller is offering access or data tied to KaoKao Mobility, a South Korean mobility company, posted 3 Oct 2026. Corporate access sales are a common precursor to ransomware and data theft. Though outside LatAm, it signals a live intrusion opportunity worth tracking for the sector.Access sale● 42
Oferta de acceso RCE y SSH root a múltiples tiendas onlineA forum user claims a setup that yields RCE, shells and root SSH access on many e-commerce servers and is looking to monetize it. If credible, these are unpatched footholds sellable for card-skimming or ransomware. E-commerce operators should assume exposed management interfaces are being probed.Access sale● 58
Venta de acceso a datos/acceso interno de NHS EnglandA VIP seller posted a fresh offering for NHS England, a national health authority, suggesting internal access or data for sale. Healthcare authorities hold highly sensitive patient and operational data, and verified access can be resold to ransomware affiliates. This is a recent post and worth tracking even though the victim is outside LATAM.