Alleged Live Access to a Spanish Public-Sector Payroll Portal Offered for Sale
Threat actor kr0x6 claims to offer live access to Spanish public-sector payroll portal covering 371 employee accounts.
Summary
A threat actor using the alias kr0x6 is allegedly offering live access to an administrative portal belonging to an unnamed Spanish public-management entity on the dark web. The compromised system reportedly provides access to 371 employee accounts with the ability to modify bank details tied to payroll deposits. This represents a significant risk to both the organization and its employees, who could be targeted for financial fraud.
Full text
Initial Access Alleged Live Access to a Spanish Public-Sector Payroll Portal Offered for Sale , and Dark Web Informer May 26, 2026 . 5:01 PM 12 min read 𝕏 Share on Facebook Share on Pinterest Share on LinkedIn Share on WhatsApp Share via Email ▣Post details !Allegedly exposed ◱Screenshot ⚠Potential impact iStatus ✕ Related Initial Access Colombian BPO ContactMaster BPO Listed in Alleged Access Sale Tied to Claro Móvil Colombia , and Dark Web Informer May 25, 2026 Paid Members Public Initial Access Swiss Parking Platform Parkingpay Listed in Alleged 2.8M-Record Data Sale , and Dark Web Informer May 24, 2026 Paid Members Public Initial Access Threat Actor 0056113 Selling Compromised Law-Enforcement Emails and EDR-as-a-Service for Fraudulent Emergency Data Requests , and Dark Web Informer April 29, 2026 Paid Members Public Initial Access Threat Actor Selling Root RCE Shell Access to Botswana Government Health Portal Firewall for $300 , and Dark Web Informer April 7, 2026 Paid Members Public Latest Vulnerabilities Root in One Request: Pre-Auth RCE in Marimo (CVE-2026-39987) , and Dark Web Informer May 29, 2026 Paid Members Public Data Breaches Argentine Healthcare Provider Swiss Medical Listed in Alleged 458K-Record Member Data Sale , and Dark Web Informer May 29, 2026 Paid Members Public Leaks French Real-Estate Co-op Platform Amepi Hit by Alleged 6K-Record Leak , and Dark Web Informer May 29, 2026 Paid Members Public Articles Daily Dose of Dark Web Informer - May 28th, 2026 , and Dark Web Informer May 28, 2026 Paid Members Public