DriftingCloud

Reports per quarter

CVEs named in reports

• CVE-2021-4034 KEV ransomware
• CVE-2022-1040 KEV
• CVE-2022-26134 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   DriftingCloud APT Group Exploits Zero-Day In Sophos Firewall

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor DriftingCloud APT Group Exploits Zero-Day In Sophos Firewall

2. 4 October 2023

   Possible supply chain attack targeting South Asian government delivers Shadowpad

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Possible supply chain attack targeting South Asian government delivers Shadowpad

3. 14 July 2023

   Possible Supply Chain Attack Targeting Pakistani Government Delivers Shadowpad

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Possible Supply Chain Attack Targeting Pakistani Government Delivers Shadowpad

4. 15 June 2022

   DriftingCloud- Zero-Day Sophos Firewall Exploitation and an Insidious Breach

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor DriftingCloud- Zero-Day Sophos Firewall Exploitation and an Insidious Breach

5. 15 June 2022

   DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach

Newest first. Details opens the report in Explore.