The threat actor claims to be selling unauthorized SSH access to an unidentified financial organization with more than 4,000 hosts and annual revenue exceeding $1 billion.