Threat Actor Selling Mail Access related to Financial Company Allegedly Located in Nigeria.
According to a tweet from Bank Security, Mail access to a financial company allegedly located in Nigeria is been offered for sale in the dark web. From the detail of the post, this alleged company is a small loan platform with .com.ng domain. The threat actor has also assured potential buyers that the mail is the main one from which the company manage all mails of workers.
Several screenshots as proof of the compromise from which it was possible to identified the victim.