TI Mindmap HUB
Threat Intelligence Report

Stray Cat, Open Doors: How k0t Wanders Through the Network Edge

📅 November 1, 2026 📰 www.group-ib.com 🔍 5 CVE(s) referenced

Threat actor k0t is exploiting Fortinet and Palo Alto edge devices at scale to steal credentials, establish persistent access, exfiltrate data, and potentially broker compromised networks to ransomware groups.

unclassified
CVE-2026-0257, CVE-2021-42287, CVE-2019-6693, CVE-2025-64446, CVE-2021-42278

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle