Cactus Ransomware Group Targets Qlik Sense Servers

In an ongoing campaign that began in November, actors associated with the Cactus ransomware group are exploiting three vulnerabilities in the Qlik Sense data visualization platform to deploy ransomware, and researchers warn that there are thousands of vulnerable instances online at the moment.

The first indications of the activity emerged in November, when researchers observed attackers targeting the Qlik Sense vulnerabilities (CVE-2023-41265, CVE-2023-41266, and CVE-2023-48365) in sporadic attacks. Qlik Sense had released patches for the bugs in August after researchers …

cactus cactus ransomware campaign data data visualization deploy exploiting november platform qlik qlik sense ransomware ransomware group researchers servers visualization vulnerabilities vulnerable