The threat actor claims to be selling unauthorized access to an unidentified U.S. based organization operating across Real Estate, Hospitality, and Advertising. The access includes domain-user, CEO, and VNC access, along with backend systems, servers, VPN, and financial panels.