BRIEFAccess salehighP45
Access to an African country's court case system for sale
Court case system (unnamed African country)
Detected17 September 2026 · 22:12 UTC
A seller is offering access to a government court-case system in an African country, an initial-access sale to a public-sector target. Although outside the AR-LATAM focus, it demonstrates a live vendor offering judicial-system access that regional CTI teams should track as a capability. No date is given, so treat it as time-sensitive but unverified.
CategoryAccess sale
Severityhigh
Priority score45
Detected17 September 2026 · 22:12 UTC
Access sale● 35
Comprador busca correos de gobiernos en foro clandestinoA user on DarkForums posted a request to buy government email accounts, a demand signal for access to public-sector mailboxes. Such buyers typically pursue espionage, invoice fraud or further intrusion via trusted government addresses. No specific victim is named, so impact is potential rather than confirmed.Access sale● 61
Venta de acceso a la base de datos del hospital de la Fuerza Terrestre del IRGC (Irán)A seller on BreachForums is offering full database access to the IRGC Ground Force Hospital, a military medical facility. Selling direct database access to a named military target is a high-value access offering, not generic chatter, and could enable further intrusion or extortion. CTI teams tracking regional military/healthcare threats and any partners with Iranian exposure should monitor this listing.Access sale● 72
Venta de acceso OT a un PLC SLC 500 en PoloniaA seller is offering dual-surface OT access bundling an Allen-Bradley SLC 500 PLC with an L2TP VPN foothold in Poland. Control of industrial PLCs lets an attacker manipulate physical processes, so manufacturing and critical-infrastructure defenders should assume this foothold could be resold or weaponized.Access sale● 42
Acceso al panel de administración del sitio español legaliti.esA forum user is offering administrator information and the admin email for the Spanish legal website legaliti.es, indicating a compromise of its backend or admin account. Admin access enables defacement, data theft, malware injection and abuse of the site's visitors. Spain is in scope for Spanish-language monitoring and this is a fresh, actionable access listing.Access sale● 64
Venta de acceso a PLC industrial CompactLogix en AustriaA seller is offering live read/write access to a CompactLogix 5069 PLC with 274 tags in an Austrian industrial environment. Such access allows manipulation of physical processes, posing a serious OT/ICS safety and availability risk. Though outside Latin America, it signals active brokering of industrial control access relevant to critical-infrastructure defenders.Access sale● 48
Filtración de una máquina virtual de la exchange Gate.ioA leaked virtual machine image allegedly belonging to the crypto exchange Gate.io was posted on a Russian-language forum, potentially containing configuration, credentials or keys from the platform's infrastructure. Such artifacts can enable initial access or lateral movement against a major financial platform. Exchanges are high-value targets due to the potential for direct fund theft.