🔎 Quick Facts
🔗 DarkWebInformer.com - Cyber Threat Intelligence
📅 Date: 2025-02-19 12:04:44
🚨 Title: Alleged Sale of Email Access to Polizia di Stato
🛡️ Victim Country: Italy
🏭 Victim Industry: Government Administration
🏢 Victim Organization: Polizia di Stato
🌐 Victim Site: poliziadistato.it
📜 Category: Initial Access
🔗 Claim: https://breachforums.st/Thread-SELLING-Selling-Italian-Police-Governmental-Email-with-5-Law-Enforcement-Panels
🕵️♂️ Threat Actor: EDRVendor
🌍 Network: OpenWeb
📝 What Happened?
A cybercriminal operating under the alias EDRVendor is allegedly selling access to an Italian Polizia di Stato government email account. The seller claims the access includes:
- Meta Law Enforcement Panel (Facebook, Instagram, WhatsApp)
- TikTok Law Enforcement Panel
- Twitter/X Law Enforcement Panel
- Five Law Enforcement Portals in Total
The listing states that the email access is persistent, meaning buyers can add a recovery email to maintain control even if the password is changed. The vendor also claims to have successfully processed 15 prior emergency data requests (EDRs) using the compromised credentials.
The access is being sold for $220, with an option to include an Italian subpoena and search warrant bundle for $280.
📊 Compromised Access Details
- Targeted Access: Italian law enforcement email and associated platforms
- Potential Law Enforcement Impersonation Risks
- High-Value Initial Access for Cybercriminals
🛡 WhiteIntel.io Data Leak Information
(No victim site disclosed)
⚠ Implications
- Law Enforcement Manipulation – Criminals may use the access to submit fraudulent emergency data requests (EDRs) to obtain sensitive user data from tech companies.
- Operational Security Threat – Unauthorized access to these panels can allow targeted surveillance, information requests, and potential abuse of police resources.
- Potential National Security Risk – If legitimate, this sale could indicate a broader compromise of Italian law enforcement digital assets.
🔧 Recommended Actions
- Immediate Investigation & Credential Rotation – Italian authorities should secure and audit all government email accounts for unauthorized access.
- Law Enforcement Panel Security Review – Meta, TikTok, and Twitter should verify the integrity of their law enforcement portals to prevent unauthorized requests.
- Dark Web & Cybercrime Monitoring – Authorities should track ongoing cybercriminal discussions for further sales of government credentials.
- Strengthened Multi-Factor Authentication (MFA) – All law enforcement-related accounts should enforce hardware-based MFA to mitigate unauthorized access risks.
⚠ Stay informed on emerging cyber threats. Visit DarkWebInformer.com for real-time updates on security risks and breaches.
