A threat actor claims to be selling admin-level access (FTP and WP admin) to corporate analytics software, which allegedly serves major clients such as Fidelity, Walt Disney, Nordstrom, Orange, and various energy companies. The software, purportedly developed by an Israeli team, is said to be utilized by corporations in the US, UK, South Africa, Israel, and India.
The actor asserts that this access is not obtained from logs but directly from internal systems, enabling the modification of files and settings within the domain. The platform supports multiple versions of Windows Server (2016, 2019, and 2022), with the sale starting at $3,000.
The seller further claims the software’s website receives 10-12k visits per month, though no specific data on installations is provided. This access is said to include both trial and paid versions, with some data stored on an accessible FTP domain. The offer also includes a limited 48-hour post-purchase support period.
