We have identified a new post on one of the dark web markets, where a threat actor going by ‘Governer’ is selling government and law enforcement email accounts from several African countries, with a clear list of prices per country.
According to the post, the following countries’ accounts are currently up for sale:
- Egyptian Government — $80
- Malawi — $45
- Tanzania — $50
- Algeria — $80
- Kenya Police — $80
- Zambia Police — $50
What stands out here is how these emails are being marketed. The seller is not just pushing them as compromised inboxes; they are giving full instructions on how buyers can use these emails:
- Accessing sensitive government correspondence
- Sending fake data requests to platforms like Meta, TikTok, or Twitter, to harvest more personal data
- Running social engineering scams targeting businesses
- Gaining access to OSINT tools and services reserved for governments and law enforcement
This shows us once again that attackers are thinking strategically; they are no longer just selling credentials, they are selling full playbooks for how to exploit them.
African government agencies need to pay more attention to email security, especially regarding weak passwords, phishing, and multi-factor authentication (MFA).