Threat Actor

Anubis

Properties

summary
Threat actors associated with the Anubis ransomware operation were observed exploiting the Citrix Bleed 2 vulnerability (CVE-2025-5777) to gain initial access to victim environments.
first_seen
2026-07-06T04:00:29.739771+00:00
last_seen
2026-07-06T04:00:29.739771+00:00
created_at
2026-07-06T04:00:29.739771+00:00
mention_count
1
evidence_url
https://thehackernews.com/2026/07/ransomware-groups-turn-to-citrix-bleed.html
target
multiple sectors
provenance
news-scan
scan_confidence
0.8
suspected_origin
unknown
status
pending

Explore this actor's full graph with Ninja Signal

Anubis — Threat Actor Profile — Ninja Signal | Ninja Signal