Alleged sale of admin and shell access to an unidentified organization in France

⚠ Disclaimer
This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources. The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes. Dark Web Informer explicitly condemns unauthorized access, distribution, or misuse of the personal data displayed or referenced here. Users must treat exposed data responsibly and ethically.

📌 Overview
Threat actor razum has listed unauthorized access for sale to a PrestaShop-based e-commerce site located in France. According to the post, the seller is offering both admin panel and web shell access to the server, which runs PrestaShop version 1.7.7.8. The post also claims that malicious JavaScript code was inserted into the payment page, logging more than 3,000 credit card transactions from May 1 to May 28, 2025.

Key Details