> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Admin Access to a Dubai Car Marketplace Advertised With Seller Data
- URL: https://darkwebinformer.com/admin-access-to-a-dubai-car-marketplace-advertised-with-seller-data/
- Published: 2026-09-07T15:35:33.000Z
- Updated: 2026-09-07T15:35:33.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Access Listing United Arab Emirates Vehicle Marketplace Shared Free 

## Admin Access to a Dubai Car Marketplace Advertised With Seller Data

A forum actor posting as **Keishell**, crediting two others, claims to have **gained access to the administrative panel** of **ryxcars.com**, a luxury vehicle marketplace based in Dubai. The post states the account can read **every registered seller's details and modify them**. The listed data covers **seller names, email addresses, phone numbers, account type, verification status, registration dates and listing counts**, together with the vehicle side: **listing identifiers, makes, models, years, prices, currencies, locations, mileage, rental daily rates and the link between each seller and their vehicles**. A panel screenshot showing a moderator session, 217 sellers and 313 listings is offered as proof. The claim is **unverified**.

Severity MODERATE 

[ ![WhiteIntel, dark web exposure monitoring](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) 

Sellers217

Listings313

AccessAdmin panel

ActorKeishell

### ▣Post details

Targetryxcars.com

CountryUnited Arab Emirates

SectorVehicle marketplace

ListingFree, reply to unlock

Volume217 sellers, 313 listings

Access levelModerator, read and write

ObservedSep 4, 2026

ActorKeishell, with two others

### !What the post claims

- Administrative panel access
- Moderator level session shown
- Records can be modified
- Seller full names
- Seller email addresses
- Seller phone numbers
- Account and status information
- Verification status
- Account type
- Registration dates
- Listing counts per seller
- Vehicle listing identifiers
- Makes, models and years
- Prices and currencies
- Vehicle locations
- Mileage
- Rental daily rates
- Seller to vehicle associations

### ◱Screenshot

[ ![Forum post advertising administrative access to a Dubai luxury vehicle marketplace, September 2026](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/09/234597823562876358762356878273.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/09/234597823562876358762356878273.png) 

Forum post advertising RyxCars administrative access, observed 4 September 2026.

### ☷Mapped techniques

Mapped from the actors' own account. Claimed, not confirmed.

- Initial access [T1078](https://attack.mitre.org/techniques/T1078/) Valid accounts Stated The proof image shows a signed in moderator session in the platform's own administration area. How the account was obtained is not described.
- Collection [T1213](https://attack.mitre.org/techniques/T1213/) Data from information repositories Stated Seller records and vehicle listings are both reachable through the same interface, with the association between them included.
- Impact [T1565.001](https://attack.mitre.org/techniques/T1565/001/) Stored data manipulation Stated The post states the access permits changes to seller information, not only reading it, and the panel exposes verification and status controls.

### ⚠Potential impact

By volume this is small, a few hundred sellers and listings, so the exposure is not the point. **The write access is.** On a platform trading high value vehicles, the ability to edit a listing's price or a seller's contact details is a route to **payment redirection against buyers** at sums where a single success pays for the effort. The **verification controls matter just as much**, since granting or removing a verified badge manipulates the one signal buyers use to judge who is legitimate. If the access is still live, this is an operational problem rather than a disclosure problem.

### iStatus Unverified

The screenshot is **internally coherent**, showing a signed in moderator account, seller counts that agree with the listing totals, and interface controls consistent with the capabilities described. It still proves **a session at one moment rather than access that persists**, and no acquisition route, date or credential source is given. The same crew has credited itself on several recent posts, which is worth tracking. Dark Web Informer has **not tested the access and is not linking the material**, and the platform has not publicly addressed the claim.

Want everything on this breach? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=ryxcars-2026-09-04&utm%5Fcontent=threat-feed) and search there for this alert.

[View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=ryxcars-2026-09-04&utm%5Fcontent=pricing-button) 

[Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=ryxcars-2026-09-04&utm%5Fcontent=footer) // Threat Intelligence