> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # Alleged sale of unauthorized Forti web admin access to unidentified organizations - URL: https://darkwebinformer.com/alleged-sale-of-unauthorized-forti-web-admin-access-to-unidentified-organizations/ - Published: 2025-12-26T00:50:07.000Z - Updated: 2025-12-26T00:50:07.000Z - Author: Dark Web Informer - Tags: Initial Access Dark Web Informer - Cyber Threat Intelligence BREACH ALERT # Alleged sale of unauthorized Forti web admin access to unidentified organization 📅 December 25, 2025 - 7:34:39 PM 🌍 Unknown 🏢 Unknown Affected Organization Unknown Website Unknown Threat Actor SantaAd ### Incident Overview The threat actor "SantaAd" claims to be selling unauthorized Fortinet web admin access to over 3,500 organizations. The listing was posted on an open web cybercrime forum on December 25, 2025\. According to the threat actor's advertisement, the offering includes: - Fortinet web admin access valid as of December 24, 2024 - Access to 3,500+ admin panels - Mix of TIR1 priority targets The auction pricing structure is listed as follows: - Starting bid: $20,000 - Bid increment: $5,000 - Blitz (instant purchase) price: $35,000 ### Image Preview [ ![Screenshot of Forti web admin access sale listing](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/12/7829357982359786297832.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/12/7829357982359786297832.png) 🔒 ### Unlock Full Breach Intelligence Premium subscribers gain access to PLUS, PRO, or ELITE features, including breach claim URLs and fully unredacted threat and ransomware feeds with no blur, along with leak and breach coverage, 500+ onion and clearnet resources, uptime monitoring, high-resolution watermark-free images, and more. [Subscribe Now](https://darkwebinformer.com/#/portal/signup) [Subscribe with Crypto](https://darkwebinformer.com/crypto-payments/) 🔬 ### API Access for Researchers & Security Teams SOC teams, researchers, and security professionals can integrate Dark Web Informer's threat intelligence directly into their workflows via API. Access real-time breach data, threat feeds, and monitoring capabilities programmatically. [Learn About API Access](https://darkwebinformer.com/api-details/) Dark Web Informer © 2025 | Cyber Threat Intelligence | [DarkWebInformer.com](https://darkwebinformer.com/)