A threat actor named 'SantaAd' is selling Forti VPN accesses in the United States, Canada, Colombia, and Bangladesh. Access types include domain admin, domain user, local user/guest, and zero session.