Vulnerability CVE-2026-16898 Active exploit
Malicious IP 185.77.12.44 C2 activity
Threat actor Medusa Financial targets
File hash 7f8a…32d1 Ransomware
Forum chatter Access offered Vendor route
3/5 Signals correlated Asset relevance confirmed
Avenbrook Financial footprint
WEB
Customer portal Exposed gateway
Critical
VEN
Payment vendor Actor overlap
High
ID
SSO admin Credential match
High
2 generic signals · no asset match