Milk Dragon

Reported Context (1)

steal their payment card details and one-time passwords, Group-IB has warned. The phishing kit called Milk Dragon (also known as NaiLong) has been active since October 2025, and is linked to 258 phishing pages and Week in Review: Active FortiBleed Attacks, Exploited Flaws and Major Breaches

CVE (6)

Malware (4)

People (2)

Threat Actors (3)

Vendors (12)

Products (7)

Tools (2)

Industries (4)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.