Tool
Advanced IP Scanner
- First Reported
- Feb 23, 2026
- Latest Reported
- Sep 1, 2026
Reported Context (2)
- In multiple observed intrusions, the threat actors used Advanced IP Scanner to enumerate the network. In one incident, SoftPerfect Network Scanner was executed multiple times across numerous servers in preparation for Sophos Details GOLD SHERWOOD’s The Gentlemen Ransomware Playbook
- These included a renamed Advanced IP Scanner binary and two LockBit ransomware files. Apache ActiveMQ Exploit Led to LockBit Ransomware Deployment
CVE (2)
Malware (2)
People (3)
Threat Actors (1)
MITRE ATT&CK (30)
Vendors (1)
Products (11)
Tools (19)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.