Exploit.exe is a tool tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed January 7, 2026; most recent activity January 7, 2026.
In December 2025, Chinese-speaking threat actors exploited vulnerabilities in VMware ESXi using a toolkit delivered through a compromised SonicWall VPN appliance. The toolkit included exploits for three zero-day…