The threat actor claims to be selling unauthorized admin access to a large U.S based WordPress e-commerce site. The compromised data listing the site allows JavaScript injection, uses a native checkout form, accepts credit card payments only.