Back to Feed
BreachesApr 22, 2026

‼️🇨🇴 A threat actor identified as GhostByte is selling "super" admin access to a Colombian comp...

GhostByte threat actor selling compromised FortiGate admin access to Colombian company for $700.

Summary

A threat actor known as GhostByte is publicly offering stolen administrative credentials to a Colombian organization's FortiGate VPN and firewall infrastructure on the dark web for $700. The compromised environment includes access to the victim's Active Directory network, granting broad lateral movement capabilities. This represents a critical infrastructure exposure with significant risk for ransomware deployment or data exfiltration.

Entities

GhostByte (threat_actor)FortiGate (product)Fortinet (vendor)Active Directory (technology)