SMTP access
Working credentials for a mail server or a mail sending service, sold so that phishing and invoice fraud can be delivered from an organisation with a clean reputation. Priced on the sending reputation of the domain rather than on the size of the mailbox.
Why it matters to you
The damage is done to a third party using your name. Your users see nothing, your inbox stays quiet, and the first symptom is usually somebody else's abuse report or a sudden fall in your own deliverability. Watch outbound volume and authentication failures, not inbound.
Where we meet it
Listings advertise the domain's age and its sending record, because those are the product. A newly registered domain is worth little here, which is why compromised accounts at established organisations command a premium.
Connected terms
Mailbox access
A working login to a corporate or personal mailbox, sold as access rather than as a password. The buyer reads, replies and resets other accounts from inside a mailbox its owner is still using.
Business Email Compromise (BEC)
Fraud committed from inside a real mailbox: the attacker reads the thread, waits for an invoice and answers it with different bank details. No malware, no attachment, nothing for a scanner to find.
Lookalike domain
A domain registered to be misread as someone else's: a swapped character, an extra hyphen, a different suffix. The cheapest piece of infrastructure in this economy and the one most often pointed at a brand.
Where this term stops being vocabulary
Sherlog is where you watch it happen to you
Knowing the word is the cheap half. The platform is the half where the term arrives attached to your domain, with a timestamp and the source it came from.
More from the goods
Bank log
Access to a compromised online banking account, sold with the balance quoted in the listing. Priced as a fraction of what it holds, because the buyer still has to get the money out.
BIN
The first six to eight digits of a payment card, identifying the issuing bank, the country and the card product. Not stolen data in itself, but the index the trade is organised around: cards are advertised, sorted and priced by BIN.
Card dump
The magnetic-stripe data read off a payment card, sold for cloning into a physical one. Distinct from card-not-present data, priced higher, and slowly becoming a legacy good as chip and contactless spread.
Combolist
A recycled email:password list compiled from old breaches and other people's logs, resold in bulk. The fast food of the credential economy: cheap, stale, everywhere.