Researchers observed a significant increase in malicious scanning of Palo Alto Networks’ GlobalProtect VPN portals, with nearly 24,000 unique IP addresses targeting the systems. This coordinated scanning began on March 17, 2025, peaking at 20,000 IPs daily. The activity raises concerns due to past vulnerabilities like CVE-2024-3400. Security teams are advised to enhance monitoring and block identified malicious IPs.
Hackers Selling SnowDog RAT Malware With Remote Control Capabilities Online
A remote access Trojan (RAT) known as SnowDog is being sold on cybercrime forums for “corporate espionage and advanced intrusions”. The malware can infiltrate networks,
