BRIEFAccess salehighP48
Admin panel access to adch.ac.in offered for sale
adch.ac.in
Detected14 November 2026 · 11:14 UTC
A seller on DarkForums is offering administrative panel access to adch.ac.in, an Indian academic institution website, in a post dated 14 November 2026. Web admin access allows defacement, data theft or hosting of malicious content and can be a stepping stone into the internal network. The domain is named explicitly, so defenders can check for compromise immediately.
CategoryAccess sale
Severityhigh
Priority score48
Detected14 November 2026 · 11:14 UTC
Access salePriority 32
Plataforma india de cripto cryptocollect.in comprometidaA DarkForums marketplace listing advertises the compromise of cryptocollect.in, an Indian crypto collection platform, likely offering stolen data or access. Crypto payment platforms hold wallet and customer records whose leakage enables fraud and account takeover of investors. The listing provides no sample or scope, so it is a low-confidence, low-scale claim worth only monitoring.Access salePriority 48
Venta de acceso a correo de la oficina de Thai Airways en PakistánA seller is offering email access to the Pakistan office of Thai Airways in a marketplace access-sale listing. Corporate email access enables business email compromise, invoice fraud and lateral movement against partners and travel agents. Airline accounts are valuable for ticket fraud and supply-chain phishing.Access salePriority 55
Se ofrece a la venta suite de exploit zero-click Pegasus v5.2.1 para iOS y AndroidA seller on DarkForums advertises a claimed full Pegasus v5.2.1 zero-click suite for iOS and Android, purportedly derived from an NSO Group leak. If authentic it would provide turnkey remote device compromise capability attractive to government-facing threat actors, though such posts are frequently scams. Defenders of high-value government and executive mobile targets should treat it as a reminder of mercenary spyware risk.Access salePriority 58
Venta de acceso inicial a grandes corporacionesA DarkForums user (ducky23) posted on 13 November 2026 offering initial access to 'huge corporations' without naming any victim. Broker posts of this type usually precede SSLVPN, RDP or webshell footholds being resold and are a common precursor to ransomware deployment. Defenders should treat unsolicited corporate access offers as an early-warning signal and hunt for anomalous remote-access logins.Access salePriority 70
Venta de base de datos con credenciales admin de Argentina, Uruguay y ParaguayA seller on DarkForums is advertising a multinational database of administrator usernames and passwords covering sites in Argentina, Uruguay and Paraguay. Admin-level credentials allow direct takeover of control panels and CMS installations rather than simple account abuse, making the set reusable for defacement and further intrusion. The listing carries no verifiable date, so treat it as a live offer until samples are checked.Access salePriority 62
Venta de acceso de administrador al sitio brasileño MontinkAn actor posting as blackhunter1 on the DarkForums marketplace is advertising administrative access to montink.com, a Brazilian print-on-demand e-commerce platform. Admin takeover could expose customer accounts, order and payment data, and allow defacement or malicious script injection on the storefront. This is a live initial-access offer against a real Latin American company and warrants timely verification.