Alleged Sale of Unauthorized Admin and Shell Access to Unidentified WordPress Shop in Romania
🧩 Standalone API Access Now Available
Access high-volume threat-intelligence data, automated ingestion endpoints, ransomware feeds, IOC data, and more – independently from the above standard subscriptions.
View API AccessUnlock Exclusive Cyber Threat Intelligence
Powered by DarkWebInformer.com
Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries.
Continuously updated breach reports and threat summaries.
Daily breach, leak, and DDoS alerts.
Live tracking with JSON export.
Direct access to claims and posts.
Concise summaries of DDoS, defacements, and breaches.
Verified index of dark web sites and services.
Live status of 500+ sites.
Integrated checks inside breach posts.
Uncompressed, watermark free evidence.
Browser alerts for tracked terms.
Quick Facts
Incident Overview
A threat actor using the handle "Shopify" posted an auction on Exploit forum on January 9, 2026 claiming to sell unauthorized administrator access and shell access to an unidentified WordPress-based e-commerce shop in Romania.
- Auction Details: Starting bid $200 USD, $25 step increments, $555 USD blitz price
- Access Type: Administrator access and shell access to WordPress installation
- Order Volume: 45,086 total orders (435 in December, 446 in November, 529 in October)
- Form Type: REDIRECT with payment form screenshot reference
- Geographic Location: Romanian
Breach Claim URL
Image Preview
Unlock Exclusive Cyber Threat Intelligence
Powered by DarkWebInformer.com
Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries.
Continuously updated breach reports and threat summaries.
Daily breach, leak, and DDoS alerts.
Live tracking with JSON export.
Direct access to claims and posts.
Concise summaries of DDoS, defacements, and breaches.
Verified index of dark web sites and services.
Live status of 500+ sites.
Integrated checks inside breach posts.
Uncompressed, watermark free evidence.
Browser alerts for tracked terms.
