Back to Feed
Threat IntelligenceJun 9, 2026

🚨A threat actor known as Orcinus orca is selling what they claim are two high-value offensive as...

Threat actor Orcinus orca claims to sell zero-day exploits for Google Edge Firewall and Cloud Armor.

Summary

A threat actor identified as Orcinus orca is reportedly offering two high-value offensive tools for sale. One of these is allegedly a zero-day exploit targeting Google's Edge Firewall (GEF) and Cloud Armor. The actor claims the first tool, named 'GEF Breacher,' can bypass security measures, though specific details on the bypass are limited.

Indicators of Compromise

  • malware — GEF Breacher

Entities

Orcinus orca (threat_actor)Google Edge Firewall (product)Cloud Armor (product)zero-day exploit (technology)