IQUALIF France Leak, IUT Paris Seine Breach, US IAB Auction, SMTP Credential Dump, and Apache Struts Exploit Sale

SOCRadar’s Dark Web Team identified several underground posts claiming a large IQUALIF-based French residential dataset (~10M records), an alleged 6.8GB breach at IUT Paris Seine, an initial-access auction for a U.S. manufacturing firm (VPN/RDP, AD hosts), a 19M SMTP credential dump, and an advertised Apache Struts (CVE-2017-5638) exploit with four compromised servers; while unverified, these claims could enable large-scale phishing, credential abuse, unauthorized access, and downstream attacks such as ransomware or data exfiltration.