Grayling

Reports per quarter

CVEs named in reports

• CVE-2017-11882 KEV ransomware
• CVE-2019-0803 KEV ransomware
• CVE-2021-26855 KEV ransomware
• CVE-2021-26857 KEV ransomware
• CVE-2021-27065 KEV ransomware
• CVE-2021-44228 KEV ransomware
• CVE-2022-42475 KEV ransomware
• CVE-2022-47966 KEV ransomware
• CVE-2023-23397 KEV
• CVE-2023-2868 KEV
• CVE-2023-28771 KEV
• CVE-2023-38831 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   MimiKatz (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor MimiKatz (Malware Family)

2. 2 April 2024

   APT and financial attacks on industrial organizations in H2 2023 | Kaspersky ICS CERT EN

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor APT and financial attacks on industrial organizations in H2 2023 | Kaspersky ICS CERT EN

3. 10 October 2023

   Grayling: Previously Unseen Threat Actor Targets Multiple Organizations in Taiwan

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Grayling: Previously Unseen Threat Actor Targets Multiple Organizations in Taiwan

Newest first. Details opens the report in Explore.