BRIEFAccess salehighP74
Domain Admin (AD) access to Czech SaaS company for sale
Czech Republic Technology/SaaS company ($100M-$250M)
Detected18 October 2026 · 19:39 UTC
A seller is offering Active Directory Domain Admin access to a Czech Technology/SaaS company with roughly $100M–$250M revenue, implying full domain control over corporate identities and endpoints. Such access enables lateral movement, ransomware staging and data theft across the entire estate. It is a high-value target worth tracking for acquisition and downstream attack risk.
CategoryAccess sale
Severityhigh
Priority score74
Detected18 October 2026 · 19:39 UTC
Access sale● 47
Venta de clave API de VirusTotal Enterprise (GTI) con 3M peticiones al mesA seller is offering a working VirusTotal Enterprise/GTI API key with a 3 million requests per month quota and Retrohunt access. Abuse of such a key lets an adversary quietly test malware against dozens of engines and hunt samples without attribution limits, degrading defenders' detection edge and OPSEC. Security teams should check whether any keys from their tenancy have been leaked or shared.Access sale● 50
Venta de acceso de administrador a Vipdestek (Turquía)A seller posted full administrative access to Vipdestek.com, a Turkish hosting and domain services company, including a multi-page thread with presumed proof. Admin control of a hosting provider can mean control over hosted customer sites, DNS and mail, making it a pivot point for supply-chain style attacks. The post dates from April 2026, so it is not a fresh alert, but the offer may still be live or reused.Access sale● 36
Comparten una webshell recién subida en foro de hackingA user on Cracked.st is sharing a 'freshly uploaded shell,' an interactive webshell that gives remote control of a compromised web server. No specific victim or domain is named, so it cannot yet be tied to a known target, but shared shells are often repurposed for defacement, data theft, or as a foothold. Worth monitoring in case the same kit or infrastructure reappears.Access sale● 45
Oportunidad de acceso/phishing a gran empresa industrial internacionalA member advertised a 'potential for corporate phishing/access' against a major international industrial business on the spear.cx forum. No target is named and no actual credentials are shown, but such leads often precede targeted intrusion attempts. It is a vague access opportunity, so treat it as low-priority monitoring.Access sale● 22
Oferta gratuita de acceso por phishing a una gran industria internacionalA forum user is freely giving away what is described as phishing/initial-access material against an unnamed 'major international industrial business'. No victim name, country or asset type (VPN, RDP, mailbox) is disclosed, so it cannot be tied to Argentine or LATAM critical infrastructure. It is only marginally useful as a lead if the actor later names the target.Access sale● 44
Posible acceso corporativo filtrado de una gran empresa industrial internacionalA threat actor is distributing stealer-log data described as providing phishing and initial-access potential against a major international industrial company. The victim organization is not named, but exposed credentials could enable account takeover, lateral movement and follow-on intrusion. Industrial-sector defenders should treat this as a credential-exposure and access-risk warning and hunt for reused credentials.