ctrlINT What the industry said about every indicator, with the quote

IronErn440Threat actor

IronErn440 is a threat actor tracked by Oligo Security for orchestrating the ShadowRay 2.0 campaign, an evolution of attacks since September 2023 exploiting CVE-2023-48022, a missing authentication flaw in the Ray AI framework's Job Submission API.From MISP Galaxy

Last reported 2 months ago, by Infosecurity Magazine1 report

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

1 report, newest first · the exact sentence from each

  1. “… 2.0, the campaign it documented in November 2025 against exposed Ray clusters, which it had attributed at the time to an actor called IronErn440.”

    Infosecurity MagazineNews
    TeamPCP Traced Back to 2020 Cryptojacking Operation

Indicators in its reports

named in the reports above
Copy this indicator · defanged

Thanks — we review every report.

Report a wrong match
What is wrong with IronErn440 here?
No account needed. We do not store your IP address.