Actor Claims to Sell Root Access to Botswana Government Health Portal Firewall

Summary
A listing attributed to Florence, linked to the Nightmare group, claims to offer root RCE and shell access to a Linux firewall protecting Botswana’s Government Health Portal for $300. The claim is not independently verified.
Key points
- The article reports a listing attributed to threat actor Florence, who is described as tied to the Nightmare group.
- The listing claims to offer root-level RCE and shell access to a Linux firewall protecting Botswana’s Government Health Portal.
- The claimed access could allow command execution, firewall rule changes, traffic interception and movement into internal healthcare systems.
- The reported asking price is $300, with contact said to be through Session messaging.
- The article provides no independent evidence confirming the access or the listing’s claims.
Article Details
- Victim Organization
- Botswana Government Health Portal
- Incident Type
- Reported sale of root-level remote code execution and shell access to a firewall protecting the portal
- Operational Impact
- The listing claims the access could enable arbitrary command execution, firewall rule changes, traffic interception, and persistence, with potential movement into internal healthcare systems. Actual access or resulting impact is not confirmed.
- Ransom Or Extortion
- The listing reportedly offers the access for $300, non-negotiable. No ransom or extortion demand is reported.
- Claim Status
- claimed
