FTP — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
February 24, 2026
Last Seen
July 13, 2026

FTP is a technology platform tracked by ThreatCluster, appearing in 5 threat clusters built from 6 intelligence report mentions.

FTP is a technology platform tracked across 5 threat clusters and 6 intelligence report mentions on ThreatCluster. First observed February 24, 2026; most recent activity July 13, 2026.

Related Threat Clusters

  • Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure

    A joint advisory from 21 global cybersecurity agencies warns that Russian state hackers from the FSB's Center 16 are exploiting poorly configured routers to infiltrate critical infrastructure networks worldwide. The…

    76 articles · Updated July 13, 2026
  • Critical Squid Proxy Vulnerability 'Squidbleed' Exposes User Data

    A memory leak vulnerability named Squidbleed, tracked as CVE-2026-47729, has been discovered in the Squid web proxy software, affecting versions since 1997. This flaw allows attackers to read beyond memory buffer…

    10 articles · Updated June 22, 2026
  • Cyber Threats Target Solar Infrastructure Beyond Inverters

    In late December 2025, a cyber attack impacted 30 solar plants in Poland, primarily targeting substation equipment with wiper malware, while inverters remained unaffected. The attack highlighted vulnerabilities in the…

    2 articles · Updated June 4, 2026
  • LucidRook Malware Targets NGOs and Universities in Taiwan

    A new Lua-based malware named LucidRook is being deployed in targeted attacks against non-governmental organizations and universities in Taiwan. The threat group UAT-10362 is believed to be behind these spear-phishing…

    7 articles · Updated April 9, 2026
  • Critical Vulnerabilities in SolarWinds Serv-U Software Patched

    SolarWinds has issued security updates for four critical remote code execution vulnerabilities in its Serv-U software, which could allow attackers to gain root access to unpatched servers. The affected software is used…

    19 articles · Updated February 24, 2026

Recent Intelligence Reports

  • Weak Security Continues to Fuel Russian Cyberattacks — Darkreading · July 13, 2026
  • Russian State — Darkwebinformer · July 13, 2026
  • Mythos discovers 'Squidbleed,' a memory leak that's gone undetected since Clinton era — Theregister · June 23, 2026
  • Solar Cyber Threats Expand But Inverters Still Stay In The Crosshairs — www.pv-magazine.com · June 4, 2026
  • New 'LucidRook' malware used in targeted attacks on NGOs, universities — Bleepingcomputer · April 9, 2026
  • SolarWinds Serv‑U Patch Blocks Full Server Takeover — Petri · February 24, 2026

Frequently asked questions

What is FTP?

FTP is a technology platform tracked by ThreatCluster, appearing in 5 threat clusters built from 6 intelligence report mentions.

Is FTP still active?

The most recent intelligence report mentioning FTP on ThreatCluster is dated July 13, 2026. Activity was first observed February 24, 2026, giving a tracked span from then to July 13, 2026.

What is FTP associated with?

Across ThreatCluster reporting, FTP most frequently co-occurs with Berserk Bear, Crouching Yeti, Dragonfly, Energetic Bear, FSB Center 16, among 12 tracked related entities.

What are the latest developments involving FTP?

The most significant recent cluster is “Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure” (76 articles · Updated July 13, 2026). FTP appears across 5 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on FTP?

FTP appears in 6 intelligence report mentions across 5 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown