Qilin Ransomware allegedly breached chemical manufacturer giant Dow Inc
2026-03-31T08:51:52Z•1d52f65f375353ebefceb73f49122e1e21914986de6eb4d335de93d86c38efde
CVE-2026-21643China-linked APTDow IncEggStremeFuelFluffyGh0stFortiClient EMSFortinetHIUPANHypnosis LoaderInfinity StealerMASOL RATNuitka payloads','ClickFixPUBLOADPoshRATQilinTelegramTrackBakZDI-CAN-30207active-exploitationdata-leakmacOSransomwareremote-code-executionsoutheast-asiazero-day
What happened
SecurityAffairs feed reports multiple high-impact incidents: Qilin ransomware claims (unproven) breach of Dow Inc.; a 2025 China-linked campaign targeted a Southeast Asian government deploying many malware families (HIUPAN, PUBLOAD, EggStremeFuel/Loader, MASOL RAT, PoshRAT, TrackBak, Hypnosis Loader, FluffyGh0st); an alleged Telegram zero-day disclosed via ZDI (ZDI-CAN-30207, CVSS 9.8) that Telegram disputes; actively exploited Fortinet FortiClient EMS remote code execution vulnerability (CVE-2026-21643, CVSS ~9.1); a new macOS Infinity Stealer campaign using a Nuitka-compiled Python payload +
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 1d52f65f375353ebefceb73f49122e1e21914986de6eb4d335de93d86c38efde
- Enrichment time
- 2026-03-31T08:51:52Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.