[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1e7gJqK2yBmysA1fcw7aT8tXIce2NsLq1IY-YXGrZQA":3},{"article":4,"iocs":43},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":27,"category":28,"article_tags":32},"5296a957-9aa1-4d90-87f2-56a5c5683c48","Threat Actor Claims to Sell Live Web-Shell Access to a NASA Web Application","threat-actor-claims-to-sell-live-web-shell-access-to-a-nasa-web-application-ae6643","A threat actor using the alias hackformetome claims to be selling persistent web-shell access and a related exploit to a compromised NASA .gov web application, advertising remote code execution and the ability to pivot into internal network ranges.","A threat actor using the alias hackformetome is advertising persistent web-shell access and an exploit for a compromised NASA .gov web application on the dark web, claiming to offer remote code execution and the ability to pivot into internal network ranges. This represents a significant threat to US federal infrastructure and sensitive government systems. The sale listing comes amid a broader trend of initial access brokers monetizing compromised government and critical infrastructure assets.","Threat actor claims to sell web-shell access to NASA .gov application with RCE capability.","Initial Access Threat Actor Claims to Sell Live Web-Shell Access to a NASA Web Application , and Dark Web Informer June 1, 2026 . 3:31 PM 12 min read 𝕏 Share on Facebook Share on Pinterest Share on LinkedIn Share on WhatsApp Share via Email ▣Post details !Allegedly exposed ◱Screenshot ⚠Potential impact iStatus ✕ Related Initial Access Alleged Live Access to a Spanish Public-Sector Payroll Portal Offered for Sale , and Dark Web Informer May 26, 2026 Paid Members Public Initial Access Colombian BPO ContactMaster BPO Listed in Alleged Access Sale Tied to Claro Móvil Colombia , and Dark Web Informer May 25, 2026 Paid Members Public Initial Access Swiss Parking Platform Parkingpay Listed in Alleged 2.8M-Record Data Sale , and Dark Web Informer May 24, 2026 Paid Members Public Initial Access Threat Actor 0056113 Selling Compromised Law-Enforcement Emails and EDR-as-a-Service for Fraudulent Emergency Data Requests , and Dark Web Informer April 29, 2026 Paid Members Public Latest Leaks Australian Workplace Catering Platform Hampr Hit by Alleged 360K+ Record Leak , and Dark Web Informer May 31, 2026 Paid Members Public Vulnerabilities Root in One Request: Pre-Auth RCE in Marimo (CVE-2026-39987) , and Dark Web Informer May 29, 2026 Paid Members Public Data Breaches Argentine Healthcare Provider Swiss Medical Listed in Alleged 458K-Record Member Data Sale , and Dark Web Informer May 29, 2026 Paid Members Public Leaks French Real-Estate Co-op Platform Amepi Hit by Alleged 6K-Record Leak , and Dark Web Informer May 29, 2026 Paid Members Public","https:\u002F\u002Fdarkwebinformer.com\u002Fthreat-actor-claims-to-sell-live-web-shell-access-to-a-nasa-web-application\u002F","https:\u002F\u002Fstorage.ghost.io\u002Fc\u002F6b\u002F16\u002F6b16ac9c-cd67-432f-b0f3-bbec941084ff\u002Fcontent\u002Fimages\u002F2026\u002F06\u002F798235682364875987234987692874.png","2026-06-01T15:32:13+00:00","2026-06-01T16:00:15.378+00:00",9,[18,21,24],{"name":19,"type":20},"hackformetome","threat_actor",{"name":22,"type":23},"NASA","vendor",{"name":25,"type":26},"Web Shell","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":27,"icon":29,"name":30,"slug":31},null,"Breaches","breaches",[33,38],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":39},{"id":40,"icon":29,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[44],{"type":45,"value":46,"context":47},"domain","nasa.gov","Target of alleged web-shell compromise and RCE exploit"]