INT3X Claims to Sell mutreasury Data and a Zero-Day Vulnerability
Summary
A seller identified as INT3X claims to offer data from mutreasury, used by more than 28 Egyptian universities, including admin credentials, ERP API tokens and student payment records. The seller also advertises a claimed zero-day.
Key points
- INT3X is reportedly selling a database allegedly taken from mutreasury, a payment gateway used by more than 28 Egyptian universities.
- The reported data includes administrative credentials, employee access information, ERP API tokens and student payment transaction records.
- The seller claims a public preview shows data from four universities.
- INT3X also advertises a claimed zero-day for unauthenticated access, persistence and extraction of data from additional connected universities; the article provides no independent verification.
Article Details
- Victim Organization
- mutreasury
- Incident Type
- Alleged database breach and sale; the seller also claims to offer a zero-day vulnerability for unauthenticated access and data extraction.
- Data Types Exposed
- Administrative credentials
- Internal employee access data
- ERP API tokens
- Student payment transaction records
- Affected Records
- Record count not disclosed; the database reportedly covers more than 28 Egyptian universities, with four shown in a public preview.
- Operational Impact
- The reported exposure of administrative credentials and ERP API tokens could affect access to mutreasury and connected university systems. The seller claims the offered vulnerability enables persistence and real-time data extraction; successful exploitation was not confirmed.
- Ransom Or Extortion
- The seller is reportedly offering the database for sale and claims to be selling a zero-day vulnerability. No ransom demand was reported.
- Claim Status
- alleged