BRIEFAccess salehighP72
Access to Malaysia Armed Forces payroll system up for sale
Malaysian Armed Forces (Angkatan Tentera Malaysia) payroll system
Detected9 November 2026 · 23:43 UTC
A seller is offering access to the payroll system of the Malaysian Armed Forces, a sensitive military human-resources and payment platform. Compromise can expose service members' personal and financial data and serve as a foothold for deeper intrusion into defense networks. This government/military initial-access sale warrants urgent verification by regional defense authorities.
CategoryAccess sale
Severityhigh
Priority score72
Detected9 November 2026 · 23:43 UTC
Access salePriority 40
Tienda vende servidores RDP validados y logs de stealer recientesAn RDP shop advertising on BlackBones offers validated RDP server access and freshly harvested stealer logs with automated bot delivery. Ready-to-use remote access lowers the barrier for ransomware and intrusions, and stealer logs fuel credential-based attacks. Organizations should harden exposed RDP and monitor for stolen credentials in circulation.Access salePriority 40
Acceso al panel de administración de turedinmobiliaria.com (España)A DarkForums user is advertising administrative access to the website of Spanish real estate firm turedinmobiliaria.com, which typically means control over content, forms and stored client inquiries. Although the target is a small company, such access is frequently used for phishing against clients and for pivoting into hosting or CRM infrastructure. The post provides no confirmed proof of scale or persistence.Access salePriority 52
Venta de acceso admin al CRM de Cyworld con 663.000 registros de miembrosA BreachForums seller is offering full administrative access to the Zoho CRM of cyworld.com, the South Korean social network, together with roughly 663,000 member PII records. Admin-level CRM access plus identity data allows bulk exfiltration and resale of personal information and may permit lateral movement into linked Zoho tenant services. It is a concrete named-organization access sale, though outside the LATAM region.Access salePriority 58
Venta de acceso a redes corporativas con Domain Admin y control de DCA seller on BreachForums' Access Market advertises high-value corporate networks with Domain Admin rights, domain controller access and sensitive data included. While no victim is named, this is genuine initial-access inventory of the type brokers use to seed ransomware. Defenders should treat it as an active access broker offering and hunt for the corresponding footholds.Access salePriority 30
Venta de acceso al sitio de perfumería gatar.aljazeeraperfumes.comA thread in the BreachForums 'Access Market' section lists the URL gatar.aljazeeraperfumes.com, indicating access to this e-commerce site is being sold. The listing is sparse (domain only) and details are behind a login, so scale and access type (webshell, admin panel, RDP) are unconfirmed. It still signals a targeted intrusion attempt against a named retailer that defenders and the site owner should verify.Access salePriority 65
Venta de back-office y base de 250k clientes de RPGStashA seller on Cracked.st is offering full back-office (admin) access to RPGStash.com together with a 250k-record customer database. Selling administrative access plus customer PII implies a live compromise of the e-commerce platform rather than a stale dump, enabling fraud, account takeover and further data exfiltration. RPGStash customers and the operator should treat their accounts and payment data as potentially exposed.