BRIEFAccess salehighP80
Network controller credentials of an ASEAN Ministry of Defense for sale
ASEAN Ministry of Defense
Detected14 September 2026 · 02:12 UTC
A BreachForums seller is offering credentials to a network controller belonging to a Ministry of Defense of an ASEAN nation. Such access could enable lateral movement into government networks, defense systems and sensitive communications, making it a high-impact state-level target. Even though it is outside Latin America, military/government access sales are a priority indicator for geopolitical CTI monitoring.
CategoryAccess sale
Severityhigh
Priority score80
Detected14 September 2026 · 02:12 UTC
Access sale● 72
Venta de acceso de lectura a PLC Rockwell MicroLogix 1400 en vivoA seller offers validated read access to a live Rockwell MicroLogix 1400 controller with real I/O. Read access to a running PLC supports reconnaissance and pre-attack positioning for later disruptive manipulation. It matters for defenders tracking ICS supply-chain and OT exposure.Access sale● 85
Venta de acceso a interfaz PLC Rockwell de POWERGRID (India, Ranchi)An actor is selling web-interface access to a Rockwell PLC belonging to POWERGRID's Ranchi facility, a state-owned power transmission utility. Compromise of grid OT exposes substation control and can enable disruptive or destructive attacks. Although outside LATAM, it shows the live ICS-access market and the OT exposure that regional operators should be watching for.Access sale● 62
Venta de acceso completo a base de datos del hospital militar de la IRGCA seller is offering full database access to the IRGC Ground Force Hospital, a military medical facility in Iran, in a listing posted yesterday. Access to such a target could expose personnel records and sensitive health and military data, and it is specifically presented as live database access rather than a stale dump. Named high-value military targets of this kind warrant immediate verification and tracking.Access sale● 65
Venta de acceso a toda la base de datos del hospital de la Fuerza Terrestre del IRGC (Irán)A seller is offering full database access to the IRGC Ground Force Hospital, a military-affiliated medical facility in Iran. Such databases typically hold personnel records, patient identities and operational details, making it a high-value state/military target. Defenders tracking state-sponsored and healthcare-sector data theft should monitor this offer.Access sale● 42
Oferta de acceso a red o datos en DarkNetArmyA member is offering 'network access or data' on DarkNetArmy, a classic initial-access listing posted in early September. Without a named victim the impact is unclear, but such offers often precede ransomware intrusions. Worth querying the seller for sector and geography.Access sale● 40
Credenciales SSL VPN de Fortinet filtradas por fuerza brutaA collection of fresh Fortinet SSL VPN access credentials reportedly obtained via brute-force is being circulated on BreachForums. No specific victim is named and the seller frames it as 'training', but SSL VPN access to Fortinet appliances is a common entry point into government and critical-infrastructure networks. Defenders should assume these credentials may be reused for initial access.