/
ttps_attack:T1068 × criticity:critical × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · exploit público critical

k0t operator targets FortiGate, FortiWeb and GlobalProtect in credential theft campaign, exposing 70,000+ credentials

Group-IB research describes a widespread campaign by an operator tracked as k0t that targets FortiGate, FortiWeb and Palo Alto GlobalProtect appliances to steal credentials, persist and exfiltrate corporate data. More than 70,000 exposed credentials were identified across network-device records, LDAP dumps and other artifacts. Many FortiG…

CVE-2025-64446 CVE-2019-6693 CVE-2026-0257 k0t FortiBleed
gbhackers.com · exploit público critical

INC and The Gentlemen ransomware affiliates leak AI-assisted intrusion ops: 8,257 Claude messages, 46 INC encryptor builds, 62 victims

SOCRadar's Threat Research Unit (STRU) found open directories on 45.227.254.43 in late September 2026. They led to six more adversary servers tied to INC Ransom and The Gentlemen affiliates. The servers held 8,257 AI messages across 133 sessions, source code, stolen credentials, victim workspaces and 46 victim-specific INC encryptor build…

CVE-2026-35616 CVE-2024-57727 CVE-2026-41940 INC Ransom The Gentlemen managed service providers finance