GenieLocker

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 4, 2026
Last mentionedSep 18, 2026

Timeline

2 articles · newest first

Feral Wolf Ransomware Attacks Exploit Atlassian Confluence and Misconfigured 1C Systems

BI.ZONE links Feral Wolf ransomware attacks on Russian firms to Confluence CVE-2023-22515 exploitation and exposed 1C clusters, deploying GenieLocker.

Cyber Security NewsSep 18, 13:59 UTC · Sep 18, 2026RansomwareExploitedCVE-2023-225153 · 1 read

Angry Birds: Toy Ghouls’ new toys

Kaspersky tracks ransomware group Toy Ghouls deploying new custom backdoors, mqtt-bird-agent and matrix-bird-agent, using HiveMQ MQTT and Element as C2 channels.

Kaspersky SecurelistSep 4, 10:00 UTC · Sep 4, 2026Threat actor2 · 1 read

Related CVEs

by mentions

CVE-2023-2251599%9.8
Unauthenticated Broken Access Control in Atlassian Confluence Data Center/Server
published Oct 4, 2023Atlassian Confluence Data CenterKEVRansomwarePoC

Appears with

MQTTDoormalware · 1
Atlassianvendor · 1
Elementproduct · 1
mqtt-bird-agentmalware · 1
Russian organizationsvictim · 1
GenieLockerproduct · 1
WinRM-fsproduct · 1
Evil-WinRMproduct · 1
HiveMQorganization · 1
Toy Ghoulsthreat actor · 1
Feral Wolfthreat actor · 1
matrix-bird-agentmalware · 1
1Cvendor · 1
HiveMQproduct · 1
MatrixDoormalware · 1
1C:Enterpriseproduct · 1

Entities are extracted by the model from each article. First seen Sep 4, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.