‼️🇮🇱 A threat actor is allegedly selling ASPX webshell access with Network Admin privileges to...

Summary

A threat actor operating under the alias Toton is allegedly offering ASPX webshell access with Network Admin privileges to an undisclosed Israeli technology/SaaS company on a cybercrime forum for $800. This represents an initial access sale, a common precursor to ransomware or espionage attacks. The targeting of Israeli infrastructure aligns with geopolitical tensions and ongoing cyber operations.

Indicators of Compromise

• malware — ASPX webshell

Entities