A threat actor is auctioning full admin access to a Spanish PrestaShop site, which serves over 52,578 customers and has processed 186 recent orders. The access is being offered with payment options that include bank transfer, PayPal, and Redsys, raising significant security concerns for the e-commerce platform.
The sale of admin credentials could allow attackers to manipulate orders, access customer data, and conduct unauthorized transactions. This incident emphasizes the need for stronger security measures, such as multi-factor authentication and regular vulnerability assessments. Affected users are advised to monitor their accounts for suspicious activity and update their passwords to enhance security.
