How One Criminal Tried to Sell an MSP on the Dark Web

Huntress documents an active cybercriminal who sold access to an MSP's control panel on the dark web after obtaining credentials via phishing; investigators engaged the seller, traced the access to an MSP (and to an alleged ex-employee), coordinated with vendors to notify and remediate the victim, and emphasize defensive measures (MFA, avoid exposed RDP, phishing awareness) and the value of intel-sharing.