Skip to content
Threat Feed
Subscribe

Actor

Red Heron

1 brief RSS
high threat

WordPress Exploitation and Data Exfiltration by Red Heron Affiliate

An adversary linked to the Red Heron group is exploiting multiple vulnerabilities in WordPress, Ubiquiti, and ZyXEL devices to conduct reconnaissance, gain persistence, and exfiltrate sensitive records, including over 18,000 government documents.

WordPress +2 Red Heron data-theft exfiltration vulnerability-exploitation
1r 2t 5c 3i