Skip to content
Product
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Public IOC feed
Free blocklists: domains, IPs, hashes, wallets. No key.
Dark web
First-party leak-site collection: victims and groups.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
Docs
Pricing
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Public IOC feed
Dark web
CLI & agents
Docs
Pricing
Contact
Get a free key
Sign in
Back
DoubleQlik
Vulnerability
Threat entity extracted from intelligence sources
Nov 6: 0 mentions
Nov 7: 0 mentions
Nov 8: 0 mentions
Nov 9: 0 mentions
Nov 10: 0 mentions
Nov 11: 1 mention
Nov 12: 0 mentions
Nov 6
Nov 9
Nov 12
Entities
›
vulnerability
›
DoubleQlik
Frequency
1
occurrences
First Seen
November 11, 2026
Last Seen
November 11, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Exploited By
cactus
Tools Used
AnyDesk
Go Backdoor For Windows
Plink
Veeam Toolchain
MITRE Techniques
T1021.004 - SSH
T1053.005 - Scheduled Task
T1059.001 - PowerShell
T1071 - Application Layer Protocol
Campaigns
Cactus Ransomware Campaign
Affected Platforms
Apache ActiveMQ
Linux
OpenSSH
Qlik
Qlik Sense
Veeam
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
-
IA
Initial Access
No techniques detected
2
EX
Execution
T1053.005 - Scheduled Task
T1059.001 - PowerShell
-
PE
Persistence
No techniques detected
-
PE
Priv Esc
No techniques detected
-
DE
Defense Evasion
No techniques detected
-
CA
Cred Access
No techniques detected
-
DI
Discovery
No techniques detected
1
LM
Lateral Mov
T1021.004 - SSH
-
CO
Collection
No techniques detected
1
C2
C2
T1071 - Application Layer Protocol
-
EX
Exfil
No techniques detected
-
IM
Impact
No techniques detected
4
techniques detected across
3
tactics
Related Clusters (1)
Threat Actors Target Qlik Sense Servers with Exploits and Reverse Shells
10h ago
·
1 sources
75
Related Articles (1)
Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits
Thehackernews
·
13h ago
Related Entities
Malware
Cactus Ransomware Campaign
CWE-200 - Exposure of Sensitive Information
CWE-22 - Path Traversal
CWE-269 - Improper Privilege Management
CWE-287 - Improper Authentication
T1021.004 - SSH
T1053.005 - Scheduled Task
T1059.001 - PowerShell
T1071 - Application Layer Protocol
Apache ActiveMQ
Linux
