BRIEFAccess salehighP70
Database of 7.6 million URL:Login:Pass credentials for sale
Detected24 August 2026 · 09:15 UTC
A credential database with 7.6 million URL:Login:Pass entries is being offered, similar to other large-scale credential dumps on the same forum. These credentials can be exploited for credential stuffing or unauthorized access to various online systems. The volume and potential reach mean organizations should check for exposure and enforce credential resets.
CategoryAccess sale
Severityhigh
Priority score70
Detected24 August 2026 · 09:15 UTC
Access sale● 65
Servicio de búsqueda de credenciales filtradas LeakZero ofrece acceso masivo a cuentasThis service aggregates URL:LOG:PASS (ULP) data from multiple breaches and lets subscribers search by domain, making credential stuffing and account takeover trivially easy. It affects organizations worldwide, and the scale (15KKK rows) means many corporate and personal accounts are exposed. Defenders should treat any leaked credential as compromised, enforce MFA, and monitor for anomalous logins.Access sale● 75
Venta de acceso total a la red corporativa de Kido Group (kdc.vn)An exclusive bidding thread advertises a complete network compromise of Kido Group (kdc.vn), including executive archives, SharePoint databases and file server repositories. This is a serious initial access sale that could enable ransomware or large-scale data theft. The breadth of access makes it a high-value lead even outside Latin America.Access sale● 75
Venta de 74.000 accesos a correos electrónicosA seller is offering 74,000 valid email access credentials, likely obtained from data breaches or stealer malware. These are complete accesses to email accounts, which can be used for account recovery, financial fraud, and further phishing campaigns. The freshness of the data (dated August 28) makes it an immediate threat for email account owners.Access sale● 90
Venta de acceso a API de RENAPER y bases de datos gubernamentales de ArgentinaA seller is offering access to an API service tied to RENAPER, Argentina's national identity registry, along with other government databases. This would allow doxing, identity theft, and large-scale fraud against Argentine citizens. It is a direct threat to critical government infrastructure and must be treated as a high-priority incident.Access sale● 68
Venta de acceso VMware Horizon a empresa tecnológica suecaAccess to a VMware Horizon environment of a Swedish technology/SaaS company ($100M-$250M revenue) is being sold. VMware Horizon is a known initial attack vector for ransomware. This access could give the buyer a foothold in the corporate network and is a credible threat.Access sale● 78
Venta de acceso VPN a red corporativa de EE.UU. con 600+ hostsA seller is offering VPN access to a US corporate network with full internal visibility across more than 600 hosts and revenue above $1B. This is a confirmed initial access that could lead to ransomware or large-scale data theft. The access is recent and priced at $2,000, indicating an active threat.