The threat actor claims to be selling unauthorized VPN access to a U.S. energy and utilities company with 66 million revenue, covering about 131 PCs and 429 users.