INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Dragonforce Publishes New Victim Zhito Technology

| 2026-10-27 00:14 CRITICAL LOW RANSOMWARE & EXTORTION
JSON
Executive Summary
AI-generated
On October 27, 2026, a ransomware attack was launched against Zhito Technology, a provider and developer of smart logistics solutions and autonomous driving systems intended for the vehicle industry. The attackers exploited the "FortiBleed" vulnerability (CVE-2022-40684) to gain access to the victim's domain, which is operated by FortiOS SSL-VPN credentials exposed via this leak. This cyber operation falls under exfiltration and ransomware tactics. Zhito Technology develops intelligent vehicle software and hardware systems for commercial vehicles with a focus on making transportation and logistics more intelligent and safer. The attack affected the company's DNS records, indicating that it is also impacted by the targeted sector of transportation and logistics.
Technical Mitigations AI-generated
• Apply the vendor fix for CVE-2022-40684 and treat internet-facing systems that were not patched in time as potentially compromised until verified. • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
CVE-2022-40684CVE-2022-40684
Target & Sectors
Global Scope transportationtransportation logisticslogistics
Incident Timeline
‎2026/10/27
Threat actors used the publicly visible information indexed by Ransomware.live to discover and publish Zhito Technology as a new victim.
organisation CVE-2022
FortiBleed Exposure Detected This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).
organisation Zhito Technology
🏴‍☠️ Dragonforce has just published a new victim : Zhito Technology.
organisation DNS
The following DNS records were found for the victim's domain.
Intelligence Sources
Ransomware Live 2026-10-27