According to a post on a dark web forum a threat actor allegedly claimed to be selling network access to a major power company in the United Arab Emirates.
According to the post, the threat actor claims to have administrative domain access to a holding company operating in the water and electric power sector. The perpetrator purportedly is offering this access for $40,000, though indicating the price is negotiable.
The post details that the compromised network reportedly contains over 5,000 hosts protected by ESET antivirus software. The company supposedly generates approximately $700 million in revenue, making it a potentially significant target.
The threat actor claimed the access is available through a command and control (C2) server and suggested conducting the transaction through a trusted intermediary.