APT24 (PITTY PANDA) has been exploiting the HeartBleed vulnerability for credential theft since at least 2011.
APT24, also tracked as PITTY PANDA, has been active since at least 2011. They are known for exploiting the HeartBleed vulnerability to directly obtain valid credentials. Defenders should prioritize patching legacy software and critical vulnerabilities like HeartBleed, as well as enhance credential theft monitoring and multi-factor authentication enforcement.
The Pitty Tiger group has been active since at least 2011. They have been seen using HeartBleed vulnerability in order to directly get valid credentials
APT24, also tracked as PITTY PANDA, is known for exploiting the HeartBleed vulnerability to directly obtain valid credentials.
Defenders should prioritize patching legacy software and critical vulnerabilities like HeartBleed, as well as enhance credential theft monitoring and multi-factor authentication enforcement.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.