Attackers Use Over 240 Exploits Ahead of Ransomware Attacks

A single operator executed a four-day, large-scale Internet scanning campaign (Dec 25–28) from IPs in AS152194, leveraging Nuclei and ProjectDiscovery Interactsh OAST domains to test ~240 exploit templates and confirm successful targets via outbound callbacks; researchers observed 57,000+ OAST subdomains and identified confirmed vulnerability hits likely to be sold by Initial Access Brokers and used to fuel ransomware and other intrusions.