BRIEFAccess salehighP66
Admin access to large Spanish company sold with POS and 2,000 client accounts
Large Spanish company (unnamed)
Detected29 September 2026 · 12:07 UTC
Reposts collapsed2
A seller advertises administrative access to a large unnamed Spanish company plus point-of-sale (TPV) access and more than 2,000 client accounts. Admin access of this type enables payment fraud, mass data theft and lateral movement into internal systems. It is a serious access sale but the victim is in Spain rather than Argentina/LATAM, so impact is regional rather than directly local.
CategoryAccess sale
Severityhigh
Priority score66
Detected29 September 2026 · 12:07 UTC
Access sale● 63
Bases de datos y acceso root de universidades libanesas (*.edu.lb)The Zelda Group is offering databases of Lebanese *.edu.lb universities together with server root access, dated 2026. Server root plus student data gives full control of academic infrastructure and a supply of personal records for fraud. It is a high-impact access sale that defenders of Lebanese education networks should investigate.Access sale● 42
Acceso root al cortafuegos de un gobierno municipal de China en ventaA verified BreachForums seller advertised root access to a server hosting a firewall for a Chinese city government, though the listing is now marked SOLD. Such access can enable network intrusion and data theft against a public-sector target. It is a serious access-sale type but outside the LatAm region, already transacted and undated, so its current operational value is limited.Access sale● 76
Venta de acceso Tailscale a una gran empresa aeroespacial en AsiaA seller is offering Tailscale access to a large aerospace company in Asia, a high-value target due to defense and supply-chain sensitivity. Remote-access footholds like this are typically bought to pivot into data theft or ransomware. Defenders should hunt for unauthorized Tailscale nodes and review remote-access logs.Access sale● 72
Se ofrece en venta acceso a datos del Departamento de Comercio de EE. UU.A seller on DarkForums is advertising data or access tied to the U.S. Department of Commerce, a high-value federal target. If genuine, such material could enable further intrusion, credential abuse or influence operations against a government body. It should be triaged as a validated government-target lead rather than dismissed as chatter.Access sale● 60
Credenciales de phpMyAdmin del ITESHU de México a la ventaCredentials for the phpMyAdmin panel of ITESHU, a Mexican higher-education institute, are being offered on a hacking forum. Access to phpMyAdmin usually means direct control over the institution's backend databases, risking exfiltration or tampering of student and administrative records. This is a timely lead for defenders at Mexican public education institutions.Access sale● 78
Venta de exploit RCE pre-autenticación para Oracle PeopleSoftShinyHunters is selling a pre-authentication RCE plus WAF bypass for Oracle PeopleSoft, an ERP widely deployed across government agencies, ministries, universities and banks. This kind of unauthenticated exploit enables initial access without credentials and is highly relevant to public-sector targets in Latin America. Defenders running PeopleSoft should urgently hunt for exposed internet-facing instances and review WAF/DB logs for exploitation attempts.