[xpl0itrs]

it's time for the bmw sales post!

new price, $1500 for just dealership documents (ref #01)

everything all together BIN 30K (negotiable)

almost everything owned by BMW mapped

you will get access to every BMW post sale form (ref #01), this contains the dealership information, as long as with a list of licensed representatives

exfiltrated data includes: 20 thousand categories. pii includes Brand, Connections, Email, Links, Phone prefered brand, Prodiver, Data provider, Telefax, Website, City, Country, Address, Title

Data of every BMW Group in every country's Workspace Chats, along with any of the brands included in (Ref #03)

Root PEM for BMW Group (could be used to sign malware) (Ref #04 & Ref #05)

BMW Download Manager (Ref #06, Ref #09) , BMW TIS Search (Ref #07) & more

Unauthenticated AWS Lambda Logging Endpoint, if you fuck up, or simply want to pin someone else for it, you can inject logs to prod, along with being able to flood logs if a mistake is made.

(Ref #08)

BMW's fuckup has also caused the data of the following companies to be included:

Abarth, Alfa Romeo, Audi, Cadillac, Chevrolet, Citroen, Corvette, Cupra, Dacia, DS, Fiat, Ford, GM, Honda, Hyundai, Jaguar, Jeep, Kia, Lada, Land Rover, Mazda, Mercedes-Benz, MG, MINI, Mitsubishi, Nissan, Opel, Peugot, Porsche, Renault, Seat, Skoda, Subaru, Suzuki, Toyota, Volkswagen, Tesla, Volvo, Polestar

(Ref #03 1)

Shell Tankstelle/Shell gas station, Names, address zip brand names, email phone, website links providers, country, long lat

Buyer will get ability to upload files (Instant IA, along with the IDOR, the portals, data endpoints, plus all our recon data for pivoting)

Buyer will also get all documentation of ours on BMW, along with leads for other companies that were exposed through BMWs failure
having this access would allow you to pull from any car the (Mileage, Email, Number, Fulls, Address, Car cost, Dealer name, Car history)

also includes:

[NEW] k8s leads

[NEW] pii leaks for employees AND customers all around the world (tens of thousands with standard PII, ie full names, addresses, cars, vins, etc)

IDOR exploit still for sale

a bunch of configuration data

[NEW] a bunch of api data

[NEW] almost every subsidiary owned by bmw has been mapped

[NEW] new car companies include Mazda, Toyota, Audi, Ford, plus 32 more

[NEW] hundreds of other brands PIIs (Brand, connections, email, links, phone preferred brand, provider, data provider, telefax, website, city country, address, title, etc)

[NEW] gas station data

[NEW] order data

[NEW] vin lookups

[NEW] order pii

DLM includes:

"assets/ca/IncludedRootsPEM.pem"

"assets/data/WBA1B51020P686377_full_updates.json"

"assets/data/WBAJA91020CE60070_full_updates.js

"assets/data/ WBY51EJ0X00449892_full_updates.json"

"assets/data/d1m_session.json" "assets/data/local_macos_devices.json" "assets/data/local_windows_devices.json" "assets/data/usb_devices.json" "assets/data/usb_macos_devices.json" "assets/data/usb_windows_devices.json" & more

Sample of included post-sale form PDFs:

Ihr Ansprechpartner, Motorradzentrum Hannover

Lissabonner Allee 3

30539 Hannover

Tel. (0511) 626202

Email: [email protected];[email protected]

Handelsregister Amtsgericht München

Handelsregisternr. HRB 42243

Ust.-Id Nr DE129273398

Vertretungsberechtigt Bayerische Motoren Werke

Aktiengesellschaft

Vorstand/Board of Management: Oliver Zipse

(Vorsitzender/Chairman),

Ilka Horstmeier, Milan Nedeljković, Pieter

Nota,

Nicolas Peter, Frank Weber, Joachim Post.

Vorsitzender des Aufsichtsrats/Chairman of

the Supervisory Board: Norbert Reithofer

Sitz und Registergericht/Domicile and Court

of Registry: München HRB-42243

Upon purchase, you will receive:

- all relevant data to BMW Group

- all documentation from the initial exploitation

- all recon for BMW Group

- any data obtained of the afformentioned 32 other affected companies and subsidiaries

- IA Vectors (file upload, IDOR, portals etc)

- Shell access to Mazda (via BMW)

- Shell (Gas Station/Tankstelle) info (Names, address zip brand names, email phone, website links providers, country, long lat) from BMW

- More, yet to be specified as this post is long. DM to enquire

Referrences:

Ref #01 Translated

Ref #01 (Untranslated)

Ref #031

Ref #03 2

Ref #04

Ref #05

Ref #06
Ref #07

Ref #08

Ref #09

misc

ibb.co/4ZL00fyc

ibb.co/vfpNhzh

ibb.co/x8XzvJKs

ibb.co/cSqmJzmj

thanks to DarkRomance, our contact info:

05c8ae06e40a63cfd94d3307a3461ca668aa88bb18686083d6927e969249501075 on Session or 300B2D5FD09996D9DCFD714A3E7C0059EF70825AF78ED544880DC9990EBF9859B798CC8F2B03 on Tox to purchase / enquire.

[ptrace]

what was the initial access vector on this? phishing?

[Madness44]

what was the initial access vector on this? phishing?

this is such a researcher question LOL

[vect]

this is such a researcher question LOL

+

[Flaunder]

what was the initial access vector on this? phishing?

Oops.

[xpl0itrs]

trivy/liteLLM supplychain

This is incorrect. Now i know why these pesky journos are getting it confused. This breach had absolutely nothing to do with our alliance together, vect. LOL.

[xpl0itrs]

what was the initial access vector on this? phishing?

IDOR, auth bypass on database endpoint, a lot more that i cant remember but i have noted down.