DangerousSavanna

Reports per quarter

CVEs named in reports

• CVE-2022-42475 KEV ransomware
• CVE-2022-47966 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   Meterpreter (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Meterpreter (Malware Family)

2. 6 April 2026

   AsyncRAT (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor AsyncRAT (Malware Family)

3. 6 September 2022

   DangerousSavanna- Two-year long campaign targets financial institutions in French-speaking Africa

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor DangerousSavanna- Two-year long campaign targets financial institutions in French-speaking Africa

4. 6 September 2022

   DangerousSavanna: Two-year long campaign targets financial institutions in French-speaking Africa

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor DangerousSavanna: Two-year long campaign targets financial institutions in French-speaking Africa

Newest first. Details opens the report in Explore.