⚠️ A threat actor is selling tested Palo Alto GlobalProtect VPN credentials for 5 corporate netwo...
Threat actor selling validated Palo Alto GlobalProtect VPN credentials for five corporate networks globally.
Run Palo Alto Networks?
Get an email when a reviewed story names Palo Alto Networks, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
A threat actor is offering stolen and tested Palo Alto GlobalProtect VPN credentials for sale, targeting five corporate networks across five countries in the telecommunications, education, business services, and nonprofit sectors. The credentials have been verified as functional, representing a significant access risk to affected organizations. This incident highlights the ongoing threat of compromised VPN credentials being leveraged for initial access and lateral movement.