Admin Access to a Dubai Car Marketplace Advertised With Seller Data
A forum actor posting as Keishell, crediting two others, claims to have gained access to the administrative panel of ryxcars.com, a luxury vehicle marketplace based in Dubai. The post states the account can read every registered seller's details and modify them. The listed data covers seller names, email addresses, phone numbers, account type, verification status, registration dates and listing counts, together with the vehicle side: listing identifiers, makes, models, years, prices, currencies, locations, mileage, rental daily rates and the link between each seller and their vehicles. A panel screenshot showing a moderator session, 217 sellers and 313 listings is offered as proof. The claim is unverified.
▣Post details
!What the post claims
- Administrative panel access
- Moderator level session shown
- Records can be modified
- Seller full names
- Seller email addresses
- Seller phone numbers
- Account and status information
- Verification status
- Account type
- Registration dates
- Listing counts per seller
- Vehicle listing identifiers
- Makes, models and years
- Prices and currencies
- Vehicle locations
- Mileage
- Rental daily rates
- Seller to vehicle associations
◱Screenshot
☷Mapped techniques
Mapped from the actors' own account. Claimed, not confirmed.
- Initial access T1078 Valid accounts Stated The proof image shows a signed in moderator session in the platform's own administration area. How the account was obtained is not described.
- Collection T1213 Data from information repositories Stated Seller records and vehicle listings are both reachable through the same interface, with the association between them included.
- Impact T1565.001 Stored data manipulation Stated The post states the access permits changes to seller information, not only reading it, and the panel exposes verification and status controls.
⚠Potential impact
By volume this is small, a few hundred sellers and listings, so the exposure is not the point. The write access is. On a platform trading high value vehicles, the ability to edit a listing's price or a seller's contact details is a route to payment redirection against buyers at sums where a single success pays for the effort. The verification controls matter just as much, since granting or removing a verified badge manipulates the one signal buyers use to judge who is legitimate. If the access is still live, this is an operational problem rather than a disclosure problem.
iStatus Unverified
The screenshot is internally coherent, showing a signed in moderator account, seller counts that agree with the listing totals, and interface controls consistent with the capabilities described. It still proves a session at one moment rather than access that persists, and no acquisition route, date or credential source is given. The same crew has credited itself on several recent posts, which is worth tracking. Dark Web Informer has not tested the access and is not linking the material, and the platform has not publicly addressed the claim.
Dark Web Informer // Threat Intelligence
