Cynet‘s CyOps and Research teams have released new research on an attack campaign targeting Qlik Sense servers, after detecting the same suspicious PowerShell activity across several European customer environments in just over three minutes.
The activity closely resembles techniques used in the 2023 Cactus ransomware campaign. Cynet blocked the malicious script before the attacker’s remote access could launch, and further investigation uncovered a publicly exposed attacker server hosting custom backdoors, persistence tools and exploit material targeting other widely used enterprise software.
You can read the research here: https://www.cynet.com/security-foundations/attack-techniques/exploiting-Qlik-Sense-servers/
Related
This entry was posted on November 11, 2026 at 9:00 am and is filed under Commentary. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Cynet Uncovers Qlik Sense Attack Campaign Targeting Multiple Companies Within Minutes
Cynet‘s CyOps and Research teams have released new research on an attack campaign targeting Qlik Sense servers, after detecting the same suspicious PowerShell activity across several European customer environments in just over three minutes.
The activity closely resembles techniques used in the 2023 Cactus ransomware campaign. Cynet blocked the malicious script before the attacker’s remote access could launch, and further investigation uncovered a publicly exposed attacker server hosting custom backdoors, persistence tools and exploit material targeting other widely used enterprise software.
You can read the research here: https://www.cynet.com/security-foundations/attack-techniques/exploiting-Qlik-Sense-servers/
Share this:
Like this:
Related
This entry was posted on November 11, 2026 at 9:00 am and is filed under Commentary. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.