Reconnaissance Campaign Targets Citrix NetScaler Infrastructure
Article Content
Browse articles 
Between January 28 and February 2, 2026, a large-scale reconnaissance campaign was detected targeting Citrix ADC Gateway and NetScaler Gateway infrastructure. The operation involved over 111,834 sessions generated from more than 63,000 unique IP addresses, utilizing residential proxy rotation for login panel discovery and AWS-hosted version disclosure scanning.
Ask AI about this cluster
Answers cite the sources they use
Updated 243d ago How this analysis works
More articles in this cluster (3)
Following this threat?
Track AWS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
Vietnam Faces Surge in Cyberattacks Targeting Data and DDoS Attacks In Q3 2026, Vietnam experienced a significant increase in cyberattacks, with over 481 million data records leaked and a 258% rise in DDoS attacks. The Viettel Cybersecurity report revealed 65 data breaches, with sectors like retail and e-commerce particularly affected, losing over 165 million records. Attackers are…