A threat actor using the handle SantaAd posted an auction on a known exploit forum claiming to sell unauthorized root access to over 1,500 Linux systems tied to Stevens Sales Company. The listing references a “US DB” and ssco.net, identifying the compromise as initial access with medium severity and root-level permissions. #SantaAd #SSCO
Keypoints
- Threat actor “SantaAd” posted an auction listing on a known exploit forum.
- The listing claims unauthorized root access to more than 1,500 Linux systems.
- The access is tied to Stevens Sales Company (ssco.net) and references a “US DB”.
- The claimed compromise provides root-level permissions on the targeted hosts.
- The incident is categorized as initial access with medium severity and exposed on the open web.
DarkWebInformer.com Providing intel from some of the darkest places on the Dark Web & Clearnet. Breaches, Darknet Markets, Ransomware, Threat Alerts, & more!