Virlabs

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 26, 2026
Last mentionedSep 26, 2026

Timeline

1 articles · newest first

Red Heron Exploits Critical Gitea Flaw to Steal Repositories and Deploy Linux Rootkit

Red Heron exploited Gitea CVE-2026-60004 to steal repositories and deploy the JITTERLY backdoor and SIXZUT rootkit.

GBHackersSep 26, 08:15 UTC · Sep 26, 2026Threat actorExploitedCVE-2026-600045 · 1 read

Related CVEs

by mentions

CVE-2026-6000424%9.8
Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
published Aug 26, 2026GiteaKEVPoC ×5

Appears with

Giteavendor · 1
Red Heronthreat actor · 1
ZyXELproduct · 1
industrial automation organizationvictim · 1
HestiaCPproduct · 1
JITTERLYmalware · 1
Acronisorganization · 1
UniFiproduct · 1
Giteaproduct · 1
SIXZUTmalware · 1
WordPressproduct · 1

Entities are extracted by the model from each article. First seen Sep 26, 2026, last mentioned Sep 26, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.