BRIEFAccess salehighP58
Corporate network access with Domain Admin and DC control for sale
Detected8 November 2026 · 12:43 UTC
A seller on BreachForums' Access Market advertises high-value corporate networks with Domain Admin rights, domain controller access and sensitive data included. While no victim is named, this is genuine initial-access inventory of the type brokers use to seed ransomware. Defenders should treat it as an active access broker offering and hunt for the corresponding footholds.
CategoryAccess sale
Severityhigh
Priority score58
Detected8 November 2026 · 12:43 UTC
Access salePriority 30
Venta de acceso al sitio de perfumería gatar.aljazeeraperfumes.comA thread in the BreachForums 'Access Market' section lists the URL gatar.aljazeeraperfumes.com, indicating access to this e-commerce site is being sold. The listing is sparse (domain only) and details are behind a login, so scale and access type (webshell, admin panel, RDP) are unconfirmed. It still signals a targeted intrusion attempt against a named retailer that defenders and the site owner should verify.Access salePriority 65
Venta de back-office y base de 250k clientes de RPGStashA seller on Cracked.st is offering full back-office (admin) access to RPGStash.com together with a 250k-record customer database. Selling administrative access plus customer PII implies a live compromise of the e-commerce platform rather than a stale dump, enabling fraud, account takeover and further data exfiltration. RPGStash customers and the operator should treat their accounts and payment data as potentially exposed.Access salePriority 80
Acceso admin completo a BigCommerce y fuga de 892 mil registrosA DarkForums actor is advertising full administrative access to bigcommerce.com plus a database of roughly 892,000 records. As a major US e-commerce platform hosting thousands of merchants, such access risks supply-chain compromise and theft of customer data across many stores. BigCommerce and its merchants should verify admin credentials and monitor for use of the leaked records.Access salePriority 62
Venta de acceso de administrador al portal gubernamental indio igrodisha.gov.inA DarkForums seller (Amirxx60) is advertising administrator-level access to igrodisha.gov.in, an Indian government portal, on November 7, 2026. Admin access to a government web system allows defacement, data theft or planting of malicious content and can serve as a foothold into broader government infrastructure. Buyers of such access typically move quickly, so the window to detect abuse is short.Access salePriority 66
Venta de 19.320 accesos al gobierno de MalasiaSeller RAZOR666 offered 19,320 access credentials allegedly tied to Malaysian government systems on DarkForums. Bulk government credentials are used for initial access, account takeover and lateral movement into public-sector networks. Government portals are high-value for espionage and fraud.Access salePriority 58
Venta de acceso de administrador de reventa de U.S. Heritage Telecom (Netsapiens)A seller on DarkNetArmy is offering reseller-level administrative access to U.S. Heritage Telecom's Netsapiens platform. This grants control over telecom routing and customer accounts, a valuable foothold for toll fraud, interception and lateral movement into telecom infrastructure. Access to a carrier's reseller portal is a high-value initial-access asset that defenders in telecom should track closely.