[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fH9sg7E5TTmOjekmI5TCVYnvgMkU8MrTlz6xOxGxxSfc":3},{"article":4,"iocs":37,"watch_terms":42},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":21},"8ab4046e-83fc-4a31-831c-ec1a4d0e2129","‼️🇪🇸 Threat Actor Auctioning WordPress Admin Access to Spanish E-Commerce Site With REDSYS Paym...","threat-actor-auctioning-wordpress-admin-access-to-spanish-e-commerce-site-with-r","‼️🇪🇸 Threat Actor Auctioning WordPress Admin Access to Spanish E-Commerce Site With REDSYS Payment Gateway and ~1,200 Monthly Card Orders\n\nhttps:\u002F\u002Ft.co\u002FgqVkdIlBil","A threat actor is publicly auctioning administrative access to a Spanish e-commerce platform that integrates REDSYS payment gateway and processes approximately 1,200 card transactions monthly. The compromise exposes the site's WordPress infrastructure and payment processing capabilities to potential buyers. This represents both a direct breach of the targeted merchant and a supply-chain risk for customers whose payment data may be at risk.","Threat actor auctions WordPress admin access to Spanish e-commerce site processing payment cards.",null,"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2039033988346490990","2026-03-31T17:36:00+00:00","2026-03-31T18:00:17.696455+00:00",8,[],"2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":17,"icon":11,"name":19,"slug":20},"Breaches","breaches",[22,27,32],{"category":23},{"id":24,"icon":11,"name":25,"slug":26},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":28},{"id":29,"icon":11,"name":30,"slug":31},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":33},{"id":34,"icon":11,"name":35,"slug":36},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[38],{"type":39,"value":40,"context":41},"malware","WordPress admin access compromise","Threat actor selling administrative credentials to compromised Spanish e-commerce site",[]]