CovenantC2 Detected - 77[.]241[.]196[.]163:7443 - https://www.redpacketsecurity.com/covenant-c2-detected-77-241-196-163-port-7443/
RedPacket Security
CovenantC2 Detected - 77[.]241[.]196[.]163:7443 - RedPacket Security
Covenant C2 Detection Alerts
[AUDITTEAM] - Ransomware Victim: Ad***ng - https://www.redpacketsecurity.com/auditteam-ransomware-victim-ad-ng/
RedPacket Security
[AUDITTEAM] - Ransomware Victim: Ad***ng - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AKIRA] - Ransomware Victim: Jampac Alimentos - https://www.redpacketsecurity.com/akira-ransomware-victim-jampac-alimentos/
RedPacket Security
[AKIRA] - Ransomware Victim: Jampac Alimentos - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AKIRA] - Ransomware Victim: The Official College of Architects of León (COAL) - https://www.redpacketsecurity.com/akira-ransomware-victim-the-official-college-of-architects-of-leon-coal/
RedPacket Security
[AKIRA] - Ransomware Victim: The Official College of Architects of León (COAL) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
HackerOne Bug Bounty Disclosure: one-click-cross-account-javascript-execution-steals-a-victim-write-token-through-turbo-pagination-and-unattached-active-storage-html-pirikara - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-one-click-cross-account-javascript-execution-steals-a-victim-write-token-through-turbo-pagination-and-unattached-active-storage-html-pirikara/
RedPacket Security
HackerOne Bug Bounty Disclosure: one-click-cross-account-javascript-execution-steals-a-victim-write-token-through-turbo-pagination…
CompanyBasecamp
[RHYSIDA] - Ransomware Victim: Electro Heat Sweden AB - https://www.redpacketsecurity.com/rhysida-ransomware-victim-electro-heat-sweden-ab/
RedPacket Security
[RHYSIDA] - Ransomware Victim: Electro Heat Sweden AB - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[PANZER] - Ransomware Victim: Paessolucoes - https://www.redpacketsecurity.com/panzer-ransomware-victim-paessolucoes/
RedPacket Security
[PANZER] - Ransomware Victim: Paessolucoes - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Sports Events365 - https://www.redpacketsecurity.com/qilin-ransomware-victim-sports-events365/
RedPacket Security
[QILIN] - Ransomware Victim: Sports Events365 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SETTRA] - Ransomware Victim: hollypoultry[.]com - https://www.redpacketsecurity.com/settra-ransomware-victim-hollypoultry-com/
RedPacket Security
[SETTRA] - Ransomware Victim: hollypoultry[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SETTRA] - Ransomware Victim: www[.]windor[.]com - https://www.redpacketsecurity.com/settra-ransomware-victim-www-windor-com/
RedPacket Security
[SETTRA] - Ransomware Victim: www[.]windor[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-102490 - Zammad GmbH - Zammad - https://www.redpacketsecurity.com/cve-alert-cve-2026-102490-zammad-gmbh-zammad/
RedPacket Security
CVE Alert: CVE-2026-102490 - Zammad GmbH - Zammad - RedPacket Security
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
CVE Alert: CVE-2026-102489 - Zammad GmbH - Zammad - https://www.redpacketsecurity.com/cve-alert-cve-2026-102489-zammad-gmbh-zammad/
RedPacket Security
CVE Alert: CVE-2026-102489 - Zammad GmbH - Zammad - RedPacket Security
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also
Cobalt Strike Beacon Detected - 152[.]136[.]253[.]101:8888 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-152-136-253-101-port-8888-2/
RedPacket Security
Cobalt Strike Beacon Detected - 152[.]136[.]253[.]101:8888 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 43[.]138[.]116[.]60:8443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-43-138-116-60-port-8443-2/
RedPacket Security
Cobalt Strike Beacon Detected - 43[.]138[.]116[.]60:8443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 49[.]232[.]21[.]222:8081 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-49-232-21-222-port-8081/
RedPacket Security
Cobalt Strike Beacon Detected - 49[.]232[.]21[.]222:8081 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 120[.]76[.]143[.]184:8899 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-120-76-143-184-port-8899-13/
RedPacket Security
Cobalt Strike Beacon Detected - 120[.]76[.]143[.]184:8899 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 60[.]247[.]206[.]23:7443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-60-247-206-23-port-7443-7/
RedPacket Security
Cobalt Strike Beacon Detected - 60[.]247[.]206[.]23:7443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 123[.]57[.]146[.]34:80 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-123-57-146-34-port-80-2/
RedPacket Security
Cobalt Strike Beacon Detected - 123[.]57[.]146[.]34:80 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 45[.]87[.]53[.]6:443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-45-87-53-6-port-443-9/
RedPacket Security
Cobalt Strike Beacon Detected - 45[.]87[.]53[.]6:443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 165[.]154[.]225[.]239:8443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-165-154-225-239-port-8443-9/
RedPacket Security
Cobalt Strike Beacon Detected - 165[.]154[.]225[.]239:8443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 8[.]159[.]146[.]72:443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-8-159-146-72-port-443-23/
RedPacket Security
Cobalt Strike Beacon Detected - 8[.]159[.]146[.]72:443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts