privileged account compromise

Miyako Sues Over Sale of Access to Unidentified Venezuelan Bank

On November 20, 2025, miyako announced on DarkForums the sale of unauthorized access to an undisclosed Venezuelan bank. The post describes access to a FortiOS firewall with administrator and CLI privileges. The bank has not been identified, and no official confirmation or independent forensic evidence has been found.

Overview

Missing evidence

Unidentified bank victim.The link to the dark web forum is retained as the source of the claim, but there is no independent public corroboration.A thread capture, OSINT index, or report is required to identify the bank and validate access.

Impact details

Public evidence describes the sale of FortiOS Admin+CLI access to an unidentified Venezuelan bank. It does not confirm any data breach, unauthorized transactions, operational disruption, or subsequent exploitation.

firewallnetwork perimeter device

Classification & severity

Category
Intrusions
Subtype
privileged account compromise
Confidence
Low

ZONE.CI documents a report in which an actor offers access to FortiOS Admin+CLI to an unidentified Venezuelan bank. Public evidence supports a report of unauthorized sale of privileged access, not a confirmed data breach.

Severity assessment

High
Information impact
Credentials
Affected scope
Organization-wide
Critical service
Potential
Public confidence
Moderate

If authentic, the alleged Admin+CLI access to a banking firewall is high severity because it could enable privileged access to the network. Confidence remains low because the victim has not been identified, and there is no confirmation from the victim or independent technical validation.

Timeline

Claim

Miyako announced the sale of alleged FortiOS Admin/CLI access to an unidentified Venezuelan bank.

Evidence & sources

1 source