Threat Actor
Lynx
Properties
- summary
- Lynx ransomware operation was linked to the FortiBleed credential theft campaign, using stolen Fortinet credentials for follow-on intrusions.
- first_seen
- 2026-07-06T04:00:29.739771+00:00
- last_seen
- 2026-07-06T04:00:29.739771+00:00
- created_at
- 2026-07-06T04:00:29.739771+00:00
- mention_count
- 1
- evidence_url
- https://thehackernews.com/2026/07/fortibleed-credential-theft-linked-to.html
- resolution_basis
- exact name match to existing RansomwareGroup/RansomGroup 'lynx'
- target
- multiple sectors
- resolution_method
- automatic
- provenance
- news-scan
- rule_version
- 2026-09-12.1
- resolution_rule
- R2_name_matches_known_actor
- resolved_at
- 2026-09-12T04:34:24+00:00
- suspected_origin
- unknown
- scan_confidence
- 0.85
Explore this actor's full graph with Ninja Signal