Actor Claims ERP Access at 13 Organizations Across Nine Countries via Unverified Zero-Day
Summary
The actor Lenken claims access to 13 ERP environments across nine countries via an unpatched zero-day, citing reverse shells, implants or agents. Victim identities, the exploit and the access claims remain unverified.
Key points
- Lenken claims access to 13 ERP environments across nine countries; the organizations are not named in the supplied screenshots.
- The actor attributes the alleged access to an unpatched zero-day, but the ERP product, vulnerability and exploitation path are not identified.
- The claims mention reverse shells, implants or agent installations, with normal-user access.
- Filesystem and disk-usage output is presented as apparent proof of access, but the article says it has not been independently verified.
- The article reports no visible victim domains or malware hashes in the supplied screenshots.
Article Details
- Event Type
- Unverified claims of unauthorized access to 13 ERP environments across nine countries, allegedly enabled by an unpatched zero-day.
- Impact
- If authentic, the claimed normal-user access via reverse shell, implant, or agent could expose ERP data and credentials and enable lateral movement, operational disruption, or resale of access. The access claims, exploitation method, victim identities, and system evidence have not been independently verified.
Threat Actors
Countries
Austriato multiple ERP environments across organizations in South Africa, the United States, Iraq, India, Austria, Saudi Arabia, the United Arab Emirates, Egypt and Tanzania.Egyptin South Africa, the United States, Iraq, India, Austria, Saudi Arabia, the United Arab Emirates, Egypt and Tanzania.Indiahave access to multiple ERP environments across organizations in South Africa, the United States, Iraq, India, Austria, Saudi Arabia, the United Arab Emirates, Egypt and Tanzania.Iraqto have access to multiple ERP environments across organizations in South Africa, the United States, Iraq, India, Austria, Saudi Arabia, the United Arab Emirates, Egypt and Tanzania.Saudi ArabiaERP environments across organizations in South Africa, the United States, Iraq, India, Austria, Saudi Arabia, the United Arab Emirates, Egypt and Tanzania.South Africausing the handle "Lenken" claims to have access to multiple ERP environments across organizations in South Africa, the United States, Iraq, India, Austria, Saudi Arabia, the United Arab Emirates, Egypt and Tanzania.TanzaniaSouth Africa, the United States, Iraq, India, Austria, Saudi Arabia, the United Arab Emirates, Egypt and Tanzania.United Arab Emiratesacross organizations in South Africa, the United States, Iraq, India, Austria, Saudi Arabia, the United Arab Emirates, Egypt and Tanzania.United States"Lenken" claims to have access to multiple ERP environments across organizations in South Africa, the United States, Iraq, India, Austria, Saudi Arabia, the United Arab Emirates, Egypt and Tanzania.
Industries
AutomotiveIndia — automotive / railways — revenue undisclosedBuilding and constructionTanzania — building and construction — claimed $4.5M revenueCommercial credit intelligenceUnited States — AI-powered commercial credit intelligence — claimed $50M revenueCorporate servicesUnited Arab Emirates — corporate services / management consultancyDigital solutionsIndia / United States — digital solutions — revenue undisclosedIT ConsultingSouth Africa — IT consulting — claimed $22M revenueManagement consultancyUnited Arab Emirates — corporate services / management consultancyMEP engineeringSaudi Arabia — MEP engineering / smart systems / GRMS — private sectorRailwaysIndia — automotive / railways — revenue undisclosedSmart systemsSaudi Arabia — MEP engineering / smart systems / GRMS — private sectorVitamins, minerals and supplementsUnited States — vitamins, minerals and supplements — claimed $5.5M 2025 revenueWater technologiesEgypt — water technologies — revenue undisclosed