NewsThe Hacker NewsPublic sectorSME

    Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

    Share
    Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access. "Although tactics differ between affiliates, common patterns emerged in tradecraft through use of legitimate Remote Management and Monitoring (RMM) tooling, credential access, and hands-on-keyboard procedures used for lateral

    Affected vendors and products

    More on Credentials

    Other advisories

    Other news entries

    Source: https://thehackernews.com/2026/07/ransomware-groups-turn-to-citrix-bleed.html

    ID