/
ttps_attack:T1552.001 × latest_source_host:greynoise.io × limpar

Resultados

2 casos · pág. 1/1

greynoise.io · exploit público medium

Scanners spoofing OpenAI, Anthropic, Google and Perplexity AI crawlers probe for .env files, cloud keys and credentials

GreyNoise observed automated scanners impersonating the web crawlers of OpenAI, Anthropic, Google, Perplexity, DeepSeek and Amazon while requesting environment files, cloud access keys, private keys and password stores. A cluster of 13 forged AI crawler names from eight companies was seen; six names (belonging to Anthropic, OpenAI, Google…

CVE-2025-30208
greynoise.io · critical

Chinese-speaking actor tied to Red Heron exploits WordPress wp2shell, ZyXEL GS1900 CVE-2026-7273 and Ubiquiti; steals 18,000+ government records

GreyNoise reports that a single malicious cyber actor, tracked since 7 May 2026, is a suspected Chinese speaker working in UTC+8 and is the same as or related to Red Heron (reported by Acronis), based on the shared C2 domain, malware family, Gitea exploitation and other TTPs. The actor exploited the wp2shell WordPress chain (CVE-2026-6303…

CVE-2026-7273 CVE-2026-34908 CVE-2026-34909 Red Heron government law enforcement