Ghost

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 21, 2026
Last mentioned4d ago

Timeline

1 articles · newest first

Ransomware affiliates using Claude left chats and tools exposed

SOCRadar found 46 INC encryptor builds, notes on 62 organizations, and more than $23,920 in recorded AI spend.

Cyber Security NewsOct 21, 11:49 UTC · 4d agoRansomwareCVE-2026-35616 CVE-2024-57727 CVE-2026-419406 · 4 reads

Related CVEs

by mentions

CVE-2026-3561694%9.8
Unauthenticated Code Execution in Fortinet FortiClient EMS 7.4.5–7.4.6
published Apr 4, 2026Fortinet FortiClient EMSKEVPoC
CVE-2026-4194099%9.3
Missing-Authentication Bypass in WebPros cPanel & WHM (AuthBypass to RCE)
published Apr 29, 2026WebPros cPanelKEVRansomwarePoC ×9
CVE-2024-5772797%7.5
Unauthenticated Path Traversal File Download in SimpleHelp 5.5.7 and Earlier
published Jan 15, 2025SimpleHelp (remote support/remote access software)KEVRansomware

Appears with

RevSocksmalware · 1
CISAorganization · 1
SOCRadarorganization · 1
OpenCodeproduct · 1
INCmalware · 1
Claude Opus 4.6ai model · 1
Anthropicvendor · 1
OpenRouterorganization · 1
Phantommalware · 1
SimpleHelpvendor · 1
cPanel/WHMproduct · 1
Kimi K3ai model · 1
FortiClient EMSproduct · 1
cPanelvendor · 1
INC Ransomwarethreat actor · 1
Fortinetvendor · 1

Entities are extracted by the model from each article. First seen Oct 21, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.