The threat actor claims to sell access to e-commerce websites in multiple countries, including admin, reseller, and seller accounts. The listings include information on monthly order volumes, payment methods, and, in some cases, the ability to modify website code or inject JavaScript.