BRIEFAccess salehighP58
Reseller admin access to U.S. Heritage Telecom (Netsapiens) for sale
U.S. Heritage Telecom
Detected6 November 2026 · 22:43 UTC
A seller on DarkNetArmy is offering reseller-level administrative access to U.S. Heritage Telecom's Netsapiens platform. This grants control over telecom routing and customer accounts, a valuable foothold for toll fraud, interception and lateral movement into telecom infrastructure. Access to a carrier's reseller portal is a high-value initial-access asset that defenders in telecom should track closely.
CategoryAccess sale
Severityhigh
Priority score58
Detected6 November 2026 · 22:43 UTC
Access salePriority 57
Venta de 666 accesos a paneles cPanel con supuesta validez del 90%A DarkForums seller (Ilkrovek, 1 November 2026) is offering 666 cPanel hosting control-panel credentials with an advertised 90% validity rate. Such accesses allow site defacement, hosting of phishing kits or malware on legitimate domains, and often pivot to mail accounts and customer data. No specific victims are named, so the exposure is sector-wide for hosting providers and website owners in the region.Access salePriority 70
Venta de acceso al servidor del banco malasio Bank RakyatA seller on DarkForums is advertising access to a server at bankrakyat.com.my, the domain of Malaysia's Bank Rakyat, offering it as a database/access sale. Access to a banking back-end can enable data theft, fraudulent transactions and lateral movement into payment systems. Financial institutions in the region should treat this as a potential intrusion indicator and check for unauthorized access paths.Access salePriority 71
Venta de acceso a una organización uruguayaUser 'AndesCrypto' posted on DarkForums today an offer titled 'Access Uruguay', indicating network access to a Uruguayan entity is being sold. Initial-access sales at this level often precede ransomware deployment and lateral movement into regional partners. Uruguayan organizations in finance, government and critical services should assume possible exposure and review perimeter and VPN logs.Access salePriority 52
Venta de acceso admin al sitio gov.in igrodisha (India)A seller on DarkForums is advertising administrative access to igrodisha.gov.in, an Indian government portal. Administrative access to a government web property enables content tampering, data theft and hosting of phishing or malware under a trusted domain. Although outside the Latin American region, it is a concrete named government access sale relevant to public-sector defenders tracking government-targeting brokers.Access salePriority 64
Venta de acceso admin a empresa de automatización de almacenes (Nórdicos)An access broker is selling CI admin, SYSTEM and SQL-level footholds inside a Nordic warehouse-automation company with over EUR 250M in revenue, listed in the DarkForums access market. This is enterprise-grade network and database access to an industrial automation provider, a supply-chain and OT-adjacent target. Such access enables ransomware staging and data theft, and buyers should be assumed capable of moving quickly.Access salePriority 72
Venta de acceso de administrador a la tienda costarricense factoa.netSeller Halvvutir posted on DarkForums on 5 November 2026 offering administrative access to the Costa Rican online shop factoa.net. Admin panel access exposes orders, pricing and customer records and can be chained into payment-gateway or logistics abuse. Costa Rican e-commerce operators should verify whether the compromise is real and rotate panel credentials.