Actor Offers Claimed WordPress Admin Access to Spanish REDSYS E-Commerce Site
Summary
A Russian-language forum listing attributed to bobby_killa offers alleged WordPress admin access to an unnamed Spanish REDSYS merchant handling about 1,150–1,200 card orders monthly. The listing is not confirmation that access was obtained.
Key points
- The listing attributes the offer to threat actor bobby_killa and concerns an unnamed Spanish e-commerce site.
- The site reportedly uses REDSYS and processes roughly 1,150–1,200 card orders per month.
- The forum post lists a $1,000 starting bid, $100 increments, a $3,000 blitz price, and a 12-hour duration.
- If valid, admin access could enable checkout changes or payment skimming; the article does not establish that access was obtained or that a breach occurred.
Article Details
- Event Type
- Auction of full WordPress administrator access to a Spanish e-commerce site
- Impact
- The listing claims access to a site using the REDSYS payment gateway and handling approximately 1,150–1,200 card orders per month. A buyer could potentially manipulate checkout, deploy payment skimming, access customer order data, or conduct fraud; the article does not report a confirmed breach or resulting harm.
Threat Actors
Vendors
Products
REDSYSA threat actor going by bobby_killa is auctioning full WordPress admin access to an unnamed Spanish e-commerce site that uses the REDSYS payment gateway and handles roughly 1,150–1,200 monthly card orders.WordPressA threat actor going by bobby_killa is auctioning full WordPress admin access to an unnamed Spanish e-commerce site that uses the REDSYS payment gateway and handles roughly 1,150–1,200 monthly card orders.