Access Brokerage
Disclosed · 1 May 2026
Actor · POT_HA_3AMOK
Alleged Sale of Unauthorized Fortinet Domain Admin Access to a Business Services Company in Colombia
- Disclosed
- 1 May 2026 · 14:45:01 UTC
- Source channel
- openweb
- Category (raw)
- Initial Access
- Category (norm)
- access_brokerage
Victim
- Country
- Colombia
Original content
Threat Actor claims to be selling domain administrator access to a Colombia-based company operating in the business services sector. The access is obtained via Fortinet infrastructure and includes domain-level privileges, with additional details referencing endpoint security and an Active Directory environment.
Source disclosure
https://forum.exploit.biz/topic/281830/