In a post on a dark web forum, a threat actor made an allegation involving the sale of admin access to a large U.S. company’s Magento e-commerce platform. According to the post, the company in question has over 2.4 million registered clients and annual revenue exceeding $50 million.
The threat actor has set a starting price of $1,000 for the auction, with increments of $1,000 but with no blitz.
The ad emphasizes that domain verification and other conditions will be met before the transaction, but not afterwards. Communication is directed to be handled via private messages or Telegram.
The auction is set to conclude within 24 hours, though the end time may be adjusted at the seller’s discretion. Buyers have the option to work through a guarantor at their own expense or make full prepayment.
