Reconnaissance Campaign Targets Citrix NetScaler Infrastructure
First seen 4 Feb 2026, 13:44 UTC
•
•69% similarity
•25
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
Between January 28 and February 2, 2026, a large-scale reconnaissance campaign was detected targeting Citrix ADC Gateway and NetScaler Gateway infrastructure. The operation involved over 111,834 sessions generated from more than 63,000 unique IP addresses, utilizing residential proxy rotation for login panel discovery and AWS-hosted version disclosure scanning.
ThreatCluster AI