Threat actor claims to be selling unauthorized RDP, RMM, and shell access to an unidentified educational institution in Germany. The access reportedly includes Domain Administrator via NTLM hash, Local Administrator using cleartext credentials, and SYSTEM privileges.