Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials
Source: The Hacker News
Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access.
“Although tactics differ between affiliates, common patterns emerged in tradecraft through use of legitimate Remote Management and M