BRIEFAccess salehighP70
Internal file server of Midas Asset (South Korea) for sale
Midas Asset
Detected2 October 2026 · 02:45 UTC
A seller offers a 1TB internal file server from Midas Asset, a South Korean asset manager with roughly $33.74B AUM. Such servers hold contracts, client records and internal documents, making this a high-value dataset for fraud and extortion. Financial defenders should treat it as a credible targeted threat.
CategoryAccess sale
Severityhigh
Priority score70
Detected2 October 2026 · 02:45 UTC
Access sale● 45
Venta de acceso a base de datos y Zoho CRM de SpaziosAn actor is selling access to the database and Zoho CRM of an organization called Spazios. CRM access exposes customer records, sales pipelines and contact data, enabling fraud and further intrusion. The affected entity and region are unclear, so verify legitimacy and scope before acting.Access sale● 58
Venta de acceso RDWeb a una universidad suizaA threat actor is selling RDWeb access to a Swiss university reported to generate over $5B in revenue, making it a large, well-resourced education target. RDWeb access often provides a foothold into internal systems and lateral movement toward sensitive research or administrative data. It is a live initial-access offer rather than a reused leak.Access sale● 35
Venta de acceso al sitio surcoreano newyjh.comA seller is offering control of or access to the website www.newyjh.com, a South Korean target, in a marketplace listing dated 29 September 2026. If genuine, such access could be used for defacement, phishing or as a foothold. Impact is limited to a single non-Latin-American site, so it ranks low for a DRP in the region.Access sale● 52
Venta de credenciales bancarias de HSBC, Barclays y otros bancosA seller advertises working bank account logins for HSBC, Barclays, Wells Fargo, Bank of America and Chase. These credentials enable account takeover and money-mule fraud. Generic but fresh, it is worth feeding into fraud and ATO detection.Access sale● 40
Venta de credenciales bancarias de HSBC, Barclays y Wells FargoA forum user is offering bank logins/accounts for major institutions including HSBC, Barclays, Wells Fargo and Bank of America. Such posts are frequently scam or recycled combolist material, but if genuine they fuel account takeover and fraud against retail and business banking customers. No specific organisation or confirmed access is named, so impact and reliability are unverified.Access sale● 38
Venta de accesos RMM (ScreenConnect/SimpleHelp) para acceso inicialA seller is advertising paid access to ScreenConnect, SimpleHelp and other RMM platforms, which ransomware affiliates commonly abuse for initial access and lateral movement. No specific victim is named, so this is a capability/service rather than a confirmed intrusion. Defenders should hunt for unauthorized RMM sessions and enforce MFA on remote-management tools.