BRIEFAccess salehighP48
Access to Malaysian Armed Forces payroll system for sale
Malaysian Armed Forces
Detected20 October 2026 · 02:39 UTC
A seller advertises access (233 entries) to the Malaysian Armed Forces payroll system, a military HR and finance platform. Payroll access exposes service members' identities, bank account details and salary data, enabling fraud and intelligence collection against military staff. Although outside Latin America, a named armed-forces payroll compromise warrants tracking and cross-referencing.
CategoryAccess sale
Severityhigh
Priority score48
Detected20 October 2026 · 02:39 UTC
Access sale● 62
Base de datos completa y SQLi de Conexus Mobile a la ventaThe seller N0VEMBER is advertising a full database dump for conexusmobile.com together with a working SQL injection vulnerability, posted minutes ago. A live SQLi on a telecom/mobile-services provider means the breach is ongoing and can be re-exploited for subscriber data, SIM-related account actions and customer PII. Defenders of that platform, and peers in the MVNO/telecom space, should treat the SQLi as active, hunt for injection traffic in WAF and DB logs and patch before the dump is weaponised further.Access sale● 85
Acceso al correo institucional de una autoridad agrícola de ParaguayA thread on DarkForums advertises the official email system of a Paraguayan government agricultural authority, implying access to institutional mailboxes or the accounts that control them. Compromise of a ministry-level mail tenant enables business email compromise against suppliers and other state bodies, credential reuse into connected government services, and exfiltration of internal documents. Defenders in the Paraguayan public sector should verify MFA coverage, impossible-travel and mail-forwarding rules on this domain immediately.Access sale● 42
Vendedor ofrece 'cualquier acceso inicial' en foro clandestinoAn actor on a French-language underground forum advertises providing 'any initial access' for sale, signaling an on-demand intrusion/access-broker service. No specific victim, region, or access type (VPN, RDP, webshell) is disclosed in the public title, so it cannot be tied to a named target. It is worth tracking as an access-broker lead but is low-confidence without further detail.Access sale● 30
Venta de acceso de administrador al centro educativo búlgaro KindyrooA seller claims to have administrative and database-level access to kindyroo.bg, a Bulgarian early-education center. The target is small and outside Latin America, so regional impact is minimal, but the offer illustrates a live web-facing access sale that could be reused against franchise or partner infrastructure. No evidence of government or critical-infrastructure involvement was found in the post.Access sale● 52
Venta de exploit 0day para robar cuentas de GoogleA one-click Google account-takeover 0day is being sold, reportedly bypassing authentication to compromise Gmail and Google Workspace accounts. This threatens mass account takeover, including government and corporate users who rely on Google. Given its freshness and impact, defenders should watch for phishing campaigns or anomalous logins.Access sale● 74
Venta de acceso Domain Admin (AD) a empresa SaaS de República ChecaA seller is offering Active Directory Domain Admin access to a Czech Technology/SaaS company with roughly $100M–$250M revenue, implying full domain control over corporate identities and endpoints. Such access enables lateral movement, ransomware staging and data theft across the entire estate. It is a high-value target worth tracking for acquisition and downstream attack risk.