Incident Overview

An initial access broker operating under the handle "miya" claims to be selling unauthorized access to the Saudi Arabia Government Postal System Domain Controller. According to the advertisement posted on BreachForums, the threat actor is offering access to a firewall device with root-level Remote Code Execution capabilities, shell access, and firewall administrator permissions. The claimed access includes unknown revenue potential for the compromised system.

The threat actor has set the price at $400 USD and explicitly states the offer is non-negotiable, intended for serious buyers only. The listing includes a session ID for potential buyers to verify the access. The seller emphasizes they are not affiliated with any group, do not commit illicit activity, and are offering this access without commission work. Interested parties are instructed to contact the threat actor via their session for additional details.