Threat Actor Claims to Sell Live Web-Shell Access to a NASA Web Application
Threat actor claims to sell web-shell access to NASA .gov application with RCE capability.
Summary
A threat actor using the alias hackformetome is advertising persistent web-shell access and an exploit for a compromised NASA .gov web application on the dark web, claiming to offer remote code execution and the ability to pivot into internal network ranges. This represents a significant threat to US federal infrastructure and sensitive government systems. The sale listing comes amid a broader trend of initial access brokers monetizing compromised government and critical infrastructure assets.
Full text
Initial Access Threat Actor Claims to Sell Live Web-Shell Access to a NASA Web Application , and Dark Web Informer June 1, 2026 . 3:31 PM 12 min read 𝕏 Share on Facebook Share on Pinterest Share on LinkedIn Share on WhatsApp Share via Email ▣Post details !Allegedly exposed ◱Screenshot ⚠Potential impact iStatus ✕ Related Initial Access Alleged Live Access to a Spanish Public-Sector Payroll Portal Offered for Sale , and Dark Web Informer May 26, 2026 Paid Members Public Initial Access Colombian BPO ContactMaster BPO Listed in Alleged Access Sale Tied to Claro Móvil Colombia , and Dark Web Informer May 25, 2026 Paid Members Public Initial Access Swiss Parking Platform Parkingpay Listed in Alleged 2.8M-Record Data Sale , and Dark Web Informer May 24, 2026 Paid Members Public Initial Access Threat Actor 0056113 Selling Compromised Law-Enforcement Emails and EDR-as-a-Service for Fraudulent Emergency Data Requests , and Dark Web Informer April 29, 2026 Paid Members Public Latest Leaks Australian Workplace Catering Platform Hampr Hit by Alleged 360K+ Record Leak , and Dark Web Informer May 31, 2026 Paid Members Public Vulnerabilities Root in One Request: Pre-Auth RCE in Marimo (CVE-2026-39987) , and Dark Web Informer May 29, 2026 Paid Members Public Data Breaches Argentine Healthcare Provider Swiss Medical Listed in Alleged 458K-Record Member Data Sale , and Dark Web Informer May 29, 2026 Paid Members Public Leaks French Real-Estate Co-op Platform Amepi Hit by Alleged 6K-Record Leak , and Dark Web Informer May 29, 2026 Paid Members Public
Indicators of Compromise
- domain — nasa.gov