In October 2026, threat actors targeted Qlik Sense servers in a series of attempts to deliver PowerShell reverse shell commands, but the attacks were unsuccessful.
Cynet’s CyOps and Research teams identified the suspicious activity against several European Union‑based customers during a narrow window of just over three minutes. The incidents were detected as part of the firm’s ongoing monitoring of Qlik Sense environments.
The attackers aimed to exploit the Qlik Sense platform, a widely used business‑intelligence and data‑analytics solution, by injecting PowerShell code designed to open a reverse shell back to the attackers’ infrastructure.
Despite the rapid, coordinated attempts, no successful exploitation was reported. The activity has been noted to share certain characteristics with other known attacks, though the specifics remain unclear.
Security experts advise organisations that use Qlik Sense to remain vigilant, monitor for anomalous PowerShell activity, and ensure that their software and security controls are up to date.
<small>Source: The Hacker News — read the original story there.</small>
