Hackers and fraudsters are gaining access to sensitive drug ordering tools and then advertising some of the most tightly controlled drugs in the country, including fentanyl.

“Tap the fuck in,” a message posted to a large crime-focused Telegram group chat in October read. The user included a photo of a Macbook Pro in a darkened room with a hand hovering above the keyboard. On the screen were blue and white boxes; a dashboard used by doctors and other medical industry professionals to order prescriptions. The panel displayed various pieces of information, such as the prescribing physician, the patient’s required dose, and the patient’s name.

In the middle of the screen read the text “oxyCODONE (oxyCODONE 5 mg oral tablet).”

404 Media has uncovered a wide-spanning scheme in which criminals break into various panels used by doctors, nurses, pharmacists, and even wholesale narcotics providers, and then leverage that access to order controlled substances like oxycodone. Some of the hackers then appear to sell these substances for profit online. Because the hackers are using legitimate ordering tools designed for industry professionals, when a prescription request lands at a pharmacy, it can look as legitimate as any other.