The threat actor claims the Firebase Storage exploitation tool has been used against multiple organizations and is offering it for sale. According to the post, the tool exploits vulnerabilities or misconfigurations in Firebase Storage to gain unauthorized access to exposed storage buckets. The actor claims the tool can retrieve sensitive data, including passwords, API keys, SSL certificates, configuration files, databases, environment files, application logs, user profile pictures, device identifiers (UUIDs), email addresses, and login credentials. These claims have not been independently verified.