Subscriber-only

Cyber Threat Intelligence — subscriber access

The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.

Access Brokerage Disclosed · 1 May 2026 Actor · POT_HA_3AMOK

Alleged Sale of Unauthorized Fortinet Domain Admin Access to a Business Services Company in Colombia

Disclosed
1 May 2026 · 14:45:01 UTC
Source channel
openweb
Category (raw)
Initial Access
Category (norm)
access_brokerage
Victim
Country
Colombia

Original content

Threat Actor claims to be selling domain administrator access to a Colombia-based company operating in the business services sector. The access is obtained via Fortinet infrastructure and includes domain-level privileges, with additional details referencing endpoint security and an Active Directory environment.

Source disclosure
https://forum.exploit.biz/topic/281830/
View original