The threat actor advertises the sale of verified U.S.-based Shopify accounts with payout functionality enabled, including both business and personal account variants. the accounts support bank and cryptocurrency payouts and are accompanied by associated identity documentation.