In a cybersecurity incident, a threat actor is allegedly offering VPN access to the network of a large manufacturing company based in the USA. The access includes domain admin and NTDS rights for two main domains, posing a significant security risk.
The targeted company, with a revenue exceeding $3 billion, operates over 6,000 computers within its Active Directory. The access being sold utilizes GlobalProtect VPN and includes privileges to domain admin and NTDS rights. The company’s cybersecurity is protected by Cortex XDR. The threat actor is offering this unauthorized access for $25000, though they are open to negotiation.
