ThreatCluster

Threat Actor Conducts Large-Scale Exploit Testing Before Ransomware Deployment

First seen 9 Jan 2026, 20:34 UTC •GbhackersCybersecuritynews •87% similarity •37

Article Content

Browse articles
ThreatCluster

Between December 25–28, 2025, a threat actor executed a scanning campaign targeting internet-facing systems, testing over 240 different exploits. This operation, linked to CTG Server Limited, aimed to identify and collect data on vulnerable targets as a precursor to ransomware attacks.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →