⚠️ A threat actor is selling tested Palo Alto GlobalProtect VPN credentials for 5 corporate netwo...

Summary

A threat actor is offering stolen and tested Palo Alto GlobalProtect VPN credentials for sale, targeting five corporate networks across five countries in the telecommunications, education, business services, and nonprofit sectors. The credentials have been verified as functional, representing a significant access risk to affected organizations. This incident highlights the ongoing threat of compromised VPN credentials being leveraged for initial access and lateral movement.

Entities