Underground · what matters today
The underground stories that broke through this window. Gov/mil, access sales, ransomware, leaks, stealers. Screenshots and context on each.
Distribution by category · window
- Gov / Military5
- Access sale27
- Ransomware6
- Leak75
- Stealer0
- Other5
Window
Category
Severity
530 - 110K URL:LOG:PASS Sample | Plutonium
110,000 URL:LOG:PASS entries in a fresh sample, likely from info-stealer logs.
38K FRESH MAIL ACCESS MIX
38,000 fresh mail access credentials offered, usable for initial access.
✪ [ 73 K++ ] Combo ✪ { Chile } ✪ [ 11/JUL/2026 ] ✪
Chile
73K+ combo list for Chile posted today, could enable credential stuffing against Latin American targets.
✪ [ 171 K++ ] Combo ✪ { Colombia } ✪ [ 11/JUL/2026 ] ✪
Colombia
171K+ combo list for Colombia posted today, could enable credential stuffing against Latin American targets.
✪ [ 171 K++ ] Combo ✪ { Colombia } ✪ [ 11/JUL/2026 ] ✪ - Dumps - NulledBB
171K combolist targeting Colombia, recent and sizeable, relevant for Latin America credential stuffing.
60m ulp lines combo | Cracked.st
Massive 60 million user-password combolist, likely containing credentials for global services that could be used in credential stuffing attacks.
800X HOTMAIL Fresh Valid Mail Access 03.07 - Cracking Proxies and Wordlists - NulledBB
Fresh list of 800 Hotmail valid accesses from July 3, 2026, useful for email account compromise.
Blacksuit - hacked data - Miscellaneous Leaks - NulledBB
Blacksuit ransomware leaked data, but no evidence of Latin American victims or critical infrastructure.
ComboLists - 30K GOOD MAIL ACCESS MIX | xReactor.org - Above Expectations
30,000 mail access credentials mix, fresh and usable.
ComboLists - X1180 FRESH - VALID - PRIVATE - MIX MAIL | xReactor.org - Above Expectations
1,180 fresh private mail access credentials mixed.
Combolists - 570 HOTMAIL MAIL Access Just top Quality 12.07 | Page 2 | xReactor.org - Above Expectations
570 fresh Hotmail mail access credentials dated July 12, 2026.
⭐️LOGS (FRESH) 300MB FROM 06-07-2026⭐️ ☁ | ⭐ DNA Forums ⭐
Fresh 300MB log sample from July 6, 2026, potentially containing credentials.
1.7GB FULL LOGS | Cracked.st
1.7GB full logs likely contain credentials and session data from compromised systems.
ComboLists - Active Web Shell Access Verified Remote Backdoor List | xReactor.org - Above Expectations
List of active web shell accesses could be used for initial access to various targets.
ComboLists - 22.7K Corp Fresh Mail Acess 10.07 | xReactor.org - Above Expectations
Fresh corporate mail access list of 22,700 accounts posted on July 10, could be used for targeted attacks.
ComboLists - 1K Brazil Just Valid Mail Access 28.06 | xReactor.org - Above Expectations
1,000 Brazil mail access credentials dated June 28, 2026, Latin America relevance.
⭐️Full Company Database ⭐️Documents Scan (ID-DL-PASS) ⭐️Consumer Info Database ⭐️Phone List Database ⭐️Email List Databases ⭐️Number:Pass & Email & U | Niflheim World
Full company databases and document scans offered, but no geographical focus.
With Valid 22.7K Corp Fresh Mail Acess 10.07 | Niflheim World
Same as item 9, duplicate post of corporate email access sale.
With Valid 22.7K Corp Fresh Mail Acess 10.07 | Niflheim World
22.7K corporate email accesses sold, but no specific region or high-value target identified.
✦✦ [ 43 K++ ]✦{ Ecuador }✦Email:Pass✦FRESH✦[ 11-7-2026 ]✦✦
Ecuador email:pass combolist (43K lines) fresh, but no specific gov/critical target.
U:L:P - 6.9 Million U:L:P (URL:LOG:PASS) | SpyHackerz | Türk Hacking Forumu - RAT, Fresh Leaks & ULP
6.9 million credentials leaked, generic and not targeting AR-LATAM entities.
✦✦ [ 16 K++ ]✦{ Cuba }✦Email:Pass✦FRESH✦[ 11-7-2026 ]✦✦
Cuba email:pass combolist (16K lines) fresh, low impact.