Threat IntelligenceMar 23, 2026
‼️🇮🇳🇧🇷🇨🇴 A threat actor using the handle "vexin" is offering corporate cloud accesses at a...
Threat actor 'vexin' sells compromised cloud access for 7 organizations across India, Brazil, Colombia at 50% discount.
Summary
A threat actor operating under the handle 'vexin' is actively marketing compromised corporate cloud access credentials for seven organizations spanning India, Brazil, and Colombia at a 50% promotional discount. The targeted organizations operate in diverse sectors including IT solutions, plastic packaging, and food & beverage. This represents a significant supply of stolen credentials available in underground markets, enabling potential lateral movement, data theft, and further compromise of victim infrastructure.
Indicators of Compromise
- malware — vexin