Fire Ant — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

January 15, 2026

Last Seen

January 23, 2026

Related Threat Clusters

Exploitation of Critical VMware vCenter Server Bug CVE-2024-37079
A critical vulnerability in VMware vCenter Server, tracked as CVE-2024-37079, is being actively exploited more than a year after Broadcom issued a patch. This out-of-bounds write flaw in the DCERPC protocol has a CVSS…

2 articles · Updated January 23, 2026
China Bans U.S. and Israeli Cybersecurity Software Amid National Security Concerns
Chinese authorities have instructed domestic firms to cease using cybersecurity software from over a dozen U.S. and Israeli companies due to national security concerns. Affected vendors include VMware, Palo Alto…

3 articles · Updated January 15, 2026

Recent Intelligence Reports

Critical VMware vCenter Server bug under attack — Theregister · January 23, 2026
Patch or die: VMware vCenter Server bug fixed in 2024 under attack today — Theregister · January 23, 2026
China blacklists VMware, Palo Alto Networks software over national security fears: report — Sdxcentral · January 15, 2026

Related Entities

Phantom Taurus Salt Typhoon Unc3886 Warp Panda Malware Broadcom Cybersecurity and Infrastructure Security Agency China CVE-2023-34048 CVE-2024-37079 Government VMware ESXi