BRIEFAccess salehighP60
Spanish and European government and law enforcement email accounts for sale
Gobiernos y fuerzas de seguridad de España/Europa
Detected30 September 2026 · 10:18 UTC
A seller is advertising access to European and Spanish government and law-enforcement email accounts, a high-value foothold for phishing, fraud or espionage against public bodies. Although Spain is outside AR-LATAM, compromised official mailboxes can be leveraged for trusted-sender attacks against regional counterparts. Public-sector defenders in Spanish-speaking regions should monitor for reuse of these accounts and leaked credentials.
CategoryAccess sale
Severityhigh
Priority score60
Detected30 September 2026 · 10:18 UTC
Access sale● 24
Venta de acceso de administrador a una escuela secundariaA forum user is offering administrative access to a high school, posted just minutes ago. The access could let an attacker pivot into student records, internal email or learning platforms. The target is unnamed and low-value, so it ranks near the bottom of the feed.Access sale● 66
Venta de acceso admin a gran empresa española con TPV y 2.000 clientesA seller advertises administrative access to a large unnamed Spanish company plus point-of-sale (TPV) access and more than 2,000 client accounts. Admin access of this type enables payment fraud, mass data theft and lateral movement into internal systems. It is a serious access sale but the victim is in Spain rather than Argentina/LATAM, so impact is regional rather than directly local.Access sale● 63
Bases de datos y acceso root de universidades libanesas (*.edu.lb)The Zelda Group is offering databases of Lebanese *.edu.lb universities together with server root access, dated 2026. Server root plus student data gives full control of academic infrastructure and a supply of personal records for fraud. It is a high-impact access sale that defenders of Lebanese education networks should investigate.Access sale● 42
Acceso root al cortafuegos de un gobierno municipal de China en ventaA verified BreachForums seller advertised root access to a server hosting a firewall for a Chinese city government, though the listing is now marked SOLD. Such access can enable network intrusion and data theft against a public-sector target. It is a serious access-sale type but outside the LatAm region, already transacted and undated, so its current operational value is limited.Access sale● 76
Venta de acceso Tailscale a una gran empresa aeroespacial en AsiaA seller is offering Tailscale access to a large aerospace company in Asia, a high-value target due to defense and supply-chain sensitivity. Remote-access footholds like this are typically bought to pivot into data theft or ransomware. Defenders should hunt for unauthorized Tailscale nodes and review remote-access logs.Access sale● 72
Se ofrece en venta acceso a datos del Departamento de Comercio de EE. UU.A seller on DarkForums is advertising data or access tied to the U.S. Department of Commerce, a high-value federal target. If genuine, such material could enable further intrusion, credential abuse or influence operations against a government body. It should be triaged as a validated government-target lead rather than dismissed as chatter.