Activity timeline
Multi-cluster appears in 1 tracked threat between and .
Threat actorTracked since 2026-05
Multi-cluster
Also known as:XLab Cluster AXLab Cluster BGhost CMS ClickFix Operators
As of 2026-09-27, Multi-cluster is a threat actor tracked by Threadlinqs Intelligence across 1 threat spanning vulnerability. Also known as XLab Cluster A, XLab Cluster B, Ghost CMS ClickFix Operators.
- Tracked threats
- 11 critical
- First seen
- 2026-05-24
- Last seen
- 2026-05-24
- ATT&CK techniques
- —No mapped techniques yet
- Related CVEs
- 1Referenced by its activity