In a dark web forum post, a threat actor offered illicit access to the IT infrastructure of a private college in Spain. According to the post, the threat actor is selling control over a range of critical systems within the institution, including remote access to personal computers, virtual machine (VM) hosts, Windows servers, and workstations.
The individual behind the offer claims that buyers would be able to gain control over the college’s network. Additionally, approximately 60% of the machines in the institution are protected by Panda EDR software, though the threat actor alleges they have access to Panda’s management web panel, allowing them to disable the protection.
The seller has set the price for the full access package at $4,500, targeting cybercriminals seeking to exploit vulnerabilities in educational institutions.
