Tag: CVE-2019-19781

2 Attack Reports | 0 Vulnerabilities

Attack reports

Nefilim Ransomware

Nefilim ransomware emerged in March 2020, evolving from Nemty's code. It targets vulnerabilities in Citrix gateway devices and uses exposed Remote Desktop Protocol for initial access. The malware exfiltrates sensitive data before encryption and threatens to publish it if ransom isn't paid. Nefilim …

credential theft

lateral movement

data exfiltration

Published: February 24, 2026

Downloadable IOCs: 14

Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations

This advisory outlines the activities of an Iran-based cyber threat group that has conducted numerous intrusions against organizations in the United States and other countries since 2017, with the goal of obtaining network access to facilitate ransomware attacks. The group, known by various names s…

state-sponsored

credential-theft

Published: August 28, 2024

Downloadable IOCs: 33

Click here to see more Attack Reports