The threat actor wolfdata advertised alleged access to a Taiwanese government webshell in xss.is forum.
The threat actor did not give any additional information about the website but only it is a subdomain not main domain.
‘Hello i am selling a gov.tw webshell, not willing to disclose the domain to keep shell alive
its a subdomain not main domain
price is 450$‘ advertised the actor.
XSS.is is an open registration Russian-language forum. Visitors can access the forum’s open sections and aspiring members are able to register to the forum for free. For registration, users are required to provide a username, a password, a valid email address, and answer a security-related question to demonstrate their technical proficiency.