BRIEFAccess salehighP52
Bank logins for HSBC, Barclays and other major banks for sale
HSBC, Barclays, Wells Fargo, Bank of America, Chase
Detected1 October 2026 · 17:45 UTC
A seller advertises working bank account logins for HSBC, Barclays, Wells Fargo, Bank of America and Chase. These credentials enable account takeover and money-mule fraud. Generic but fresh, it is worth feeding into fraud and ATO detection.
CategoryAccess sale
Severityhigh
Priority score52
Detected1 October 2026 · 17:45 UTC
Access sale● 40
Venta de credenciales bancarias de HSBC, Barclays y Wells FargoA forum user is offering bank logins/accounts for major institutions including HSBC, Barclays, Wells Fargo and Bank of America. Such posts are frequently scam or recycled combolist material, but if genuine they fuel account takeover and fraud against retail and business banking customers. No specific organisation or confirmed access is named, so impact and reliability are unverified.Access sale● 38
Venta de accesos RMM (ScreenConnect/SimpleHelp) para acceso inicialA seller is advertising paid access to ScreenConnect, SimpleHelp and other RMM platforms, which ransomware affiliates commonly abuse for initial access and lateral movement. No specific victim is named, so this is a capability/service rather than a confirmed intrusion. Defenders should hunt for unauthorized RMM sessions and enforce MFA on remote-management tools.Access sale● 55
Venta de acceso a sitio gubernamental indio (mgovcloud.in)A seller is offering access to accounts.mgovcloud.in, an Indian government portal, claiming to reveal classified documents. Sales of government access enable espionage, data theft and further intrusion into state systems. Defenders should monitor for credential abuse and unauthorized logins to that domain and treat the claim as an active access offer.Access sale● 78
Venta de acceso inicial a la india Bharti AirtelA threat actor is advertising initial access to Bharti Airtel, one of India's largest telecom operators, in a freshly posted forum thread. Telecom access is high-impact, enabling subscriber-data theft, interception and lateral movement into critical infrastructure. Although outside LATAM, a named telecom access sale warrants tracking and notification.Access sale● 60
Venta de cuentas de correo de gobiernos y policía de España y EuropaA seller is advertising access to European and Spanish government and law-enforcement email accounts, a high-value foothold for phishing, fraud or espionage against public bodies. Although Spain is outside AR-LATAM, compromised official mailboxes can be leveraged for trusted-sender attacks against regional counterparts. Public-sector defenders in Spanish-speaking regions should monitor for reuse of these accounts and leaked credentials.Access sale● 24
Venta de acceso de administrador a una escuela secundariaA forum user is offering administrative access to a high school, posted just minutes ago. The access could let an attacker pivot into student records, internal email or learning platforms. The target is unnamed and low-value, so it ranks near the bottom of the feed.