A threat actor announced the sale of full network access to a U.S. Lottery Corporation on a dark web forum. The post details a range of access types, including C2, shell, RDP, and AWS S3.
According to the post, the threat actor claims to have control over 350 devices within the network, offering full privileges, including administrative rights over all network forests and enterprise administration. This level of access could allow the attacker to upload databases or even deploy ransomware within the organization.
The actor initially priced the access at $7,000. The post invites interested parties to contact the actor directly via private message for further negotiations.
