Feral Wolf

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 18, 2026
Last mentionedSep 18, 2026

Timeline

2 articles · newest first

Feral Wolf Ransomware Attacks Exploit Atlassian Confluence and Misconfigured 1C Systems

BI.ZONE links Feral Wolf ransomware attacks on Russian firms to Confluence CVE-2023-22515 exploitation and exposed 1C clusters, deploying GenieLocker.

Cyber Security NewsSep 18, 13:59 UTC · Sep 18, 2026RansomwareExploitedCVE-2023-225153 · 1 read

Feral Wolf Hackers Exploit Confluence and 1C to Deploy GenieLocker Ransomware

Feral Wolf exploited Atlassian Confluence and 1C:Enterprise flaws to deploy GenieLocker ransomware across Russian retail, construction, manufacturing and IT firms.

GBHackersSep 18, 13:02 UTC · Sep 18, 2026RansomwareExploitedCVE-2023-22515 CVE-2021-4034 CVE-2026-314312

Related CVEs

by mentions

CVE-2023-2251599%9.8
Unauthenticated Broken Access Control in Atlassian Confluence Data Center/Server
published Oct 4, 2023Atlassian Confluence Data CenterKEVRansomwarePoC
CVE-2021-403495%7.8
Out-of-Bounds Read/Write Local Privilege Escalation in polkit pkexec (PwnKit)
published Jan 28, 2022polkit project polkit (pkexec utility)KEVRansomwarePoC ×4
CVE-2026-3143198%7.8
Local Privilege Escalation (Copy Fail) in Linux Kernel algif_aead Interface
published Apr 22, 2026Linux kernel (algif_aead / AF_ALG crypto interface)KEVPoC ×12

Appears with

1Cvendor · 2
MatrixDoormalware · 2
1C:Enterpriseproduct · 2
Atlassianvendor · 2
GenieLockerproduct · 2
MQTTDoormalware · 2
GenieLockermalware · 1
GSocketproduct · 1
BI.ZONEorganization · 1
Atlassian Confluenceproduct · 1
BI.ZONEvendor · 1
Confluenceproduct · 1
MQTTDoorproduct · 1
MatrixDoorproduct · 1
Russian organizationsvictim · 1
GSocketmalware · 1

Entities are extracted by the model from each article. First seen Sep 18, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.