Threat actor
Settra
Tracked by CyberSIXT since 18 Sep · RSS
3Articles, all time
2Articles, last 30 days
1CVEs exploited, attributed · all time
0Research reports, all time
Activity
Quiet for 13 dayslast report 20 Oct3 articles2 outlets
Three articles so far, 18 Sep to 20 Oct.
- Tue 20 Oct. SecurityOnline. Ransomware gangs bypass MFA through PAN OS VPN flaw CVE-2026-0257. Cites a CVE in CISA KEV.
- Mon 12 Oct. Infosecurity. Ransomware gangs exploit Palo Alto VPN flaw months after patch release. Cites a CVE in CISA KEV.
- Fri 18 Sep. Infosecurity. New Settra Ransomware Attacks Target Retail and Manufacturing Firms.
- Known exploited CVE
- Article naming Settra
- Articles a day, all coverage
- Quiet time, folded
Drawn: all 3 articles.
Show as tableHide table
| Date | Type | Source | Title |
|---|---|---|---|
| 20 Oct | Article | SecurityOnline | Ransomware gangs bypass MFA through PAN OS VPN flaw CVE-2026-0257 |
| 12 Oct | Article | Infosecurity | Ransomware gangs exploit Palo Alto VPN flaw months after patch release |
| 18 Sep | Article | Infosecurity | New Settra Ransomware Attacks Target Retail and Manufacturing Firms |
Connections
1 exploited CVE. What the record links this actor to; hover or use the arrow keys.
In CISA KEV
Show as a listHide the list
- Exploited CVEs
- CVE-2026-0257
- Affected vendors
- Palo Alto Networks
CVEs exploited1
CVEs an article attributes to Settra, most covered first
- CVE-2026-0257Exploited
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
7.8High95% EPSS · 26 articles
MITRE ATT&CK techniques
No MITRE ATT&CK® techniques are recorded for Settra.
Articles3
Drawn: all 3 articles.
- Ransomware gangs bypass MFA through PAN OS VPN flaw CVE-2026-0257SecurityOnlineExploitedCVE-2026-0257
- Ransomware gangs exploit Palo Alto VPN flaw months after patch releaseInfosecurityExploitedCVE-2026-0257