Threat actor claims to be selling root-level CMS access to an unidentified pharmaceutical company in the USA. The advertised access reportedly includes root privileges across ten CMS instances in multiple countries, enabling administrative control over the systems.