A threat actor has allegedly breached the systems of Skyfi Network, a prominent internet service provider based in Pakistan. Skyfi Pakistan is known for providing high-speed, fixed-wireless internet connectivity across the country, aiming to bridge the digital divide for residential users, corporate clients, and educational institutions. The company plays a significant role in the nation’s telecommunications sector by offering internet solutions in areas where traditional infrastructure may be lacking.
The alleged breach was revealed on a cybercrime forum where a user advertised the sale of comprehensive access to Skyfi Network’s infrastructure for $1,600. As proof of compromise, the threat actor shared screenshots showing access to an internal management panel labeled “Skyfi Networks – CRMS.” One image displays a list of network devices, including their names, IP addresses, usernames, and passwords in plain text. Further evidence includes a screenshot of a web shell uploaded to the company’s server, indicating that the attacker has deep-level control over the compromised system. The access being sold is advertised as “PANEL+DB+SHELL,” which suggests the buyer would receive full control over the admin panel, the database, and server-level command execution.
