Skip to content
Funnull Group Deploys RingH23 Toolkit to Compromise MacCMS and CDN Infrastructure

Funnull Group Deploys RingH23 Toolkit to Compromise MacCMS and CDN Infrastructure

First seen 5 Mar 2026, 19:12 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 16:10 UTC

The cybercriminal group Funnull has launched a campaign using a new toolkit named RingH23, targeting CDN nodes and the MacCMS content management system. This attack redirects millions of users to illegal websites, marking a significant upgrade in Funnull's operational capabilities and posing a serious threat to affected organizations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

Timeline

2026-03-05
Funnull launches RingH23 toolkit targeting MacCMS and CDN infrastructure

More articles in this cluster (2)

Following this threat?

Track RingH23 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed