Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
4 IOCs

Hackers Breach Enterprise Firewalls and Vpns, Exposing over 70,000 Credentials

ORKL Threat Library
ORKL Threat Library
Published January 1, 1Original Report

Threat Actors

Malware Families

Excerpt

https://thehackernews.com/2026/10/hackers-breach-enterprise-firewalls-and.html Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials By The Hacker News Published: 2026-10-23 · Archived: 2026-10-26 02:00:53 UTC Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. "Artifacts from this investigation also indicate…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYThe Gentlemenk0tThe GentlemenINFRASTRUCTUREexploit_2026_0257.pyfortnew.pyCAPABILITYImpacketMimikatzVICTIMunknown
Adversary(3)
Infrastructure(2)
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

4 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainexploit_2026_0257.pyHighScore 70/100First seen
Domainfortnew.pyHighScore 72/100First seen
CVECVE-2026-0257HighScore 81/100First seen
CVECVE-2025-64446HighScore 68/100First seen

IOC Relationship Graph

Building graph…