BRIEFAccess salehighP45
Admin access to Technical University of Cluj-Napoca for sale
Universidad Técnica de Cluj-Napoca (utcluj.ro)
Detected15 October 2026 · 17:56 UTC
A threat actor is advertising administrative access to utcluj.ro, the Romanian Technical University of Cluj-Napoca, posted today. Selling admin access to a university enables data theft, ransomware staging and abuse of student and research systems. The institution should rotate credentials and audit for unauthorized admin sessions.
CategoryAccess sale
Severityhigh
Priority score45
Detected15 October 2026 · 17:56 UTC
Access sale● 28
Venta de acceso de administrador a wanderlustadventure.com.in (India)An actor is selling admin access to wanderlustadventure.com.in, an Indian travel site, in a listing posted minutes ago. Admin-panel access enables defacement, data theft and use of the site for further abuse. It is a low-value regional target, but the freshly sold access warrants basic monitoring.Access sale● 32
Venta de acceso de administrador al backend de hoteligy.com (España)A seller is offering admin access to the backend of hoteligy.com, a Spanish hospitality website, posted minutes ago. Backend access lets an attacker exfiltrate customer and booking data or deface the site. Spanish-speaking defenders should validate the claim and review web-facing admin panels for compromise.Access sale● 25
Venta de acceso SSH root vía exploit SegfaultA user is sharing a 'free root SSH shell' obtained through the Segfault exploit, indicating a live remote-access capability to an unspecified host. Without a named victim the operational value is limited, but root-level SSH access can be resold or chained. Worth a low-priority watch only.Access sale● 62
Venta de acceso VPN OpenVPN a un SaaS de IndonesiaA seller is offering OpenVPN access to an Indonesian technology/SaaS firm reported to have $1B-$5B in revenue. VPN credentials give a foothold into internal networks, enabling lateral movement and data theft. Access to a high-revenue enterprise is a classic precursor to ransomware and merits monitoring even outside the region.Access sale● 68
Venta de acceso a la pasarela de pago GeideaA seller on the Spear marketplace is offering access tied to the Geidea payment gateway, a major card processor in the Middle East. Compromise of a gateway exposes merchant transactions, settlement flows and cardholder data, enabling large-scale fraud. Payments and banking defenders should treat this as a live access-sale threat and hunt for related indicators.Access sale● 52
Venta de acceso a los laboratorios Ampath de SudáfricaA seller on the Spear forum is offering access tied to Ampath Laboratories in Zululand, South Africa, one of the country's largest private pathology networks. Selling access to a healthcare laboratory risks patient-data exposure and disruption of diagnostic services. Defenders in the diagnostic-healthcare sector should watch for credential stuffing and VPN/RDP intrusion attempts.