[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fN0LJOX1dY-xaZg-vNNuPL9zvaLi1pBXu_7Cse0raq4s":3},{"article":4,"iocs":53,"watch_terms":57},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":33,"category":34,"article_tags":37},"9e07761a-1968-4688-9373-18a85cd055dc","‼️ A threat actor is allegedly selling SMTP and AWS SES accounts on a popular cybercrime forum, w...","a-threat-actor-is-allegedly-selling-smtp-and-aws-ses-accounts-on-a-popular-cyber-7d1b01","‼️ A threat actor is allegedly selling SMTP and AWS SES accounts on a popular cybercrime forum, with sending limits ranging from 40K to 100K and prices starting at $150.\n⠀\n‣ Threat Actor: ric007\n‣ Category: Illicit Service \u002F Mailing Account Sale\n‣ Victim: SendGrid, Mailgun, https:\u002F\u002Ft.co\u002FzY8WP3Fb10","A threat actor operating under the handle 'ric007' is advertising compromised SMTP and AWS SES accounts for sale on a popular cybercrime forum, with sending capacities ranging from 40,000 to 100,000 emails and prices starting at $150 per account. The listings target major email service providers including SendGrid, Mailgun, and others. This represents a significant abuse vector for spam, phishing, and malware distribution campaigns.","Threat actor ric007 selling compromised SMTP and AWS SES accounts on cybercrime forum.",null,"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2048913055480741986","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHG8zRyja0AANQn8.jpg","2026-04-27T23:51:54+00:00","2026-04-28T00:00:09.280724+00:00",8,[18,21,24,26,28,31],{"name":19,"type":20},"ric007","threat_actor",{"name":22,"type":23},"SendGrid","vendor",{"name":25,"type":23},"Mailgun",{"name":27,"type":23},"Amazon Web Services",{"name":29,"type":30},"SMTP","technology",{"name":32,"type":30},"AWS SES","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":33,"icon":11,"name":35,"slug":36},"Threat Intelligence","threat-intelligence",[38,43,48],{"category":39},{"id":40,"icon":11,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":45,"icon":11,"name":46,"slug":47},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":49},{"id":50,"icon":11,"name":51,"slug":52},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[54],{"type":52,"value":55,"context":56},"Compromised SMTP\u002FAWS SES accounts","Illicit mailing accounts being sold with high sending limits for abuse",[27,22,25]]