BRIEFAccess salehighP70
Corporate access to a Brazilian company for sale
Empresa brasileña (no identificada)
Detected15 September 2026 · 14:12 UTC
A threat actor is selling corporate access to a Brazilian organization on the DarkForums marketplace. Initial-access sales like this commonly feed ransomware and data-theft operations, and the targeted firm is unnamed so attribution requires hunting. Brazilian corporates and their LATAM supply-chain partners should treat this as an active intrusion risk.
CategoryAccess sale
Severityhigh
Priority score70
Detected15 September 2026 · 14:12 UTC
Access sale● 45
Venta de acceso a scstrade.com, gran empresa pakistaníA seller is offering access to scstrade.com, described as Pakistan's largest trading company. A verified initial-access sale to a named commercial target enables downstream intrusion, data theft or fraud against its systems and partners. It lies outside LATAM but is a concrete access-sale offer worth tracking.Access sale● 72
Venta de bases de datos, código fuente y claves SSH de BLS InternationalA seller is offering databases, source code and SSH private keys belonging to BLS International, a visa and passport outsourcing firm handling sensitive identity documents for governments. Compromised source code and SSH keys could enable further intrusion into visa-processing systems and expose applicant PII. High-value target for identity theft and government service abuse.Access sale● 80
Venta de credenciales de controlador de red de un Ministerio de Defensa de la ASEANA BreachForums seller is offering credentials to a network controller belonging to a Ministry of Defense of an ASEAN nation. Such access could enable lateral movement into government networks, defense systems and sensitive communications, making it a high-impact state-level target. Even though it is outside Latin America, military/government access sales are a priority indicator for geopolitical CTI monitoring.Access sale● 72
Venta de acceso de lectura a PLC Rockwell MicroLogix 1400 en vivoA seller offers validated read access to a live Rockwell MicroLogix 1400 controller with real I/O. Read access to a running PLC supports reconnaissance and pre-attack positioning for later disruptive manipulation. It matters for defenders tracking ICS supply-chain and OT exposure.Access sale● 85
Venta de acceso a interfaz PLC Rockwell de POWERGRID (India, Ranchi)An actor is selling web-interface access to a Rockwell PLC belonging to POWERGRID's Ranchi facility, a state-owned power transmission utility. Compromise of grid OT exposes substation control and can enable disruptive or destructive attacks. Although outside LATAM, it shows the live ICS-access market and the OT exposure that regional operators should be watching for.Access sale● 62
Venta de acceso completo a base de datos del hospital militar de la IRGCA seller is offering full database access to the IRGC Ground Force Hospital, a military medical facility in Iran, in a listing posted yesterday. Access to such a target could expose personnel records and sensitive health and military data, and it is specifically presented as live database access rather than a stale dump. Named high-value military targets of this kind warrant immediate verification and tracking.