Hackers Actively Scan Citrix NetScaler Infrastructure to Identify Exposed Login Panels

Cyberpress • February 4, 2026

Share: View original

According to multiple security telemetry sources, attackers launched a massive scan aimed at discovering authentication panels and enumerating ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Reconnaissance Campaign Targets Citrix NetScaler Infrastructure Between January 28 and February 2, 2026, a large-scale reconnaissance campaign was detected targeting Citrix ADC Gateway and NetScaler Gateway infrastructure. The operation involved over 111,834 sessions generated from more than 63,000 unique IP addresses, utilizing residential proxy rotation for login panel discovery and AWS-hosted version disclosure scanning. 3 sources 25

Extracted Entities

Vulnerabilities (1)

Citrix NetScaler