Cybersecuritynews

Funnull Group Deploys RingH23 Toolkit to Compromise MacCMS and CDN Infrastructure

First seen 5 Mar 2026, 19:12 UTC • Gbhackers

•27.2

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The cybercriminal group Funnull has launched a campaign using a new toolkit named RingH23, targeting CDN nodes and the MacCMS content management system. This attack redirects millions of users to illegal websites, marking a significant upgrade in Funnull's operational capabilities and posing a serious threat to affected organizations.

How this analysis works

Timeline

2026-03-05

Funnull launches RingH23 toolkit targeting MacCMS and CDN infrastructure

Attack Flow

Continue Reading

Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025 China-linked Cyber Group Expands Targeting to Southeastern Europe China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign China-linked UAT-7290 Targets Telcos in Cyberespionage Campaign UAT-7290 Cyber Espionage Targets South Asian Telecoms Cisco Fixes Critical AsyncOS Vulnerability Under Attack

Funnull Group Deploys RingH23 Toolkit to Compromise MacCMS and CDN Infrastructure

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading