File · Danti · Unknown · misp-galaxy · refreshed 2026-10-06

Danti

sigil · no ATT&CK coverage stated

What changed

ledger · newest first

2026-10-18todaynew CVE1 new CVE: CVE-2015-2545

CVEs Danti is cited as exploiting

none on KEV

CVE-2015-25452026-10-17
1. “including the newly discovered Danti and SVCMONDR groups, were exploiting the CVE-2015-2545 vulnerability”
  cited as exploiting · source: securelist.com ↗ · 2026-10-17
2. “In February-March 2016 the group was observed using CVE-2015-2545”
  cited as exploiting · named nearby · source: securelist.com ↗ · 2026-10-17

Each line is what a source says, quoted, with the source linked under it. A citation is a source's claim, not our confirmation: read the source before you act on it.

Take it with you

keyless · no signup

References

1 source

1.securelist.com/analysis/publications/74828/cve-2015-2545-overview-of-…

Track Danti on the wire.

This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.

Follow on Telegram KEV RSS API

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.