28th September – Threat Intelligence Report
Check Point's weekly report covers ShinyHunters' FBI jobs-site breach, Bitget's $351.6M wallet theft, and actively exploited critical RCEs in Check Point and F5 products.
80
Threat actor
Storm-2570
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 24, 2026
- Last mentionedSep 28, 2026
Timeline
3 articles · newest firstMicrosoft Finds Ransomware Group Using Same Attack Blueprint Across Multiple Malware Families
Microsoft says affiliate Storm-2570 reused one playbook across Qilin, DragonForce, Anubis, and BERT.
74
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
Microsoft Threat Intelligence has observed Storm-2570, a ransomware affiliate linked to multiple ransomware payloads, using consistent tradecraft across deployments.
70
Related CVEs
by mentions- CVE-2026-8510254%9.8Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw
- CVE-2026-9361692%9.8Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
- CVE-2026-9412727%9.3Unauthenticated Heap-Overflow RCE in F5 BIG-IP APM with OAuth Profile
- CVE-2026-8790296%8.1Unauthenticated Local File Inclusion to RCE in WordPress Core (fixed in 7.1.2)
Appears with
- DragonForcemalware · 2
- Qilinmalware · 2
- Anubismalware · 2
- BERTmalware · 2
- Storm-3168threat actor · 1
- commercial facilitiesvictim · 1
- Storm-2570ai model · 1
- FBIorganization · 1
- information technology (IT)victim · 1
- Astrana Healthorganization · 1
- healthcarevictim · 1
- financial servicesorganization · 1
- MeshAgentproduct · 1
- WordPressorganization · 1
- energyorganization · 1
- ShinyHuntersthreat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.