Print Spooler

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenNov 12, 2026
Last mentioned20h ago

Timeline

1 articles · newest first

Citrus ransomware targets Russian firms with HTTPS-like VLESS tunnels

Operators use stolen contractor credentials, Certighost, and Sn00py encryption, and Kaspersky says decryption is not currently possible.

GBHackersupdated Nov 12, 06:46 UTC · 18h agofirst Nov 12, 05:13 UTC · 20h agoRansomwareExploited3 sourcesCVE-2026-54121 CVE-2020-1337

Related CVEs

by mentions

CVE-2026-541212%8.8
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network
published Jul 14, 2026microsoft windows 10 1607PoC ×4
CVE-2020-133714%7.8
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system
published Aug 17, 2020microsoft windows 10PoC ×2

Appears with

Citrusthreat actor · 1
Microsoftvendor · 1
Toy Ghoulsthreat actor · 1
Xraymalware · 1
Sn00pymalware · 1
mimikatzmalware · 1
1C:Enterpriseproduct · 1
Active Directory Certificate Servicesproduct · 1
Kasperskyorganization · 1

Entities are extracted by the model from each article. First seen Nov 12, 2026, last mentioned 20h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.