INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Hyflock Publishes New Victim Merkezilac Archives

| 2026-10-13 17:10 CRITICAL HIGH RANSOMWARE & EXTORTION
JSON
Executive Summary
AI-generated
On October 13, 2026, a cyber operation targeting the pharmaceutical and hygiene/disinfection product manufacturer Merkez İlaç was detected. The company is one of the oldest local pharmaceutical factories in modern Turkey, with nearly a century of history, founded in 1934. The attack appears to be related to the "FortiBleed" vulnerability (CVE-2022-40684), which exposed FortiOS SSL-VPN credentials via a DNS leak. This has affected over 9,500 hospitals and clinics in Turkey that rely on Merkez İlaç for medical supplies and surgical/first aid consumables. The attack is believed to be carried out by Hyflock, who recently published the victim's domain as part of their publicly visible information index.
Technical Mitigations AI-generated
• Apply the vendor fix for CVE-2022-40684 and treat internet-facing systems that were not patched in time as potentially compromised until verified. • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
CVE-2022-40684CVE-2022-40684
Target & Sectors
Global Scope retailretail manufacturingmanufacturing healthhealth pharmaceuticalpharmaceutical
Incident Timeline
‎2026/10/13
FortiBleed Exposure Detected via CVE-2022-40684 exposed the domain's FortiOS SSL-VPN credentials.
organisation FortiBleed Exposure Detected
FortiBleed Exposure Detected This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).
organisation CVE-2022
FortiBleed Exposure Detected This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).
organisation Scale •
Here’s a detailed introduction about the company: 🏢 Company Background and Scale •
organisation • Certification Standards: Production
• Certification Standards: Production is fully supervised by the Turkish Ministry of Health (T.C. Sağlık Bakanlığı) and has passed a series of international certifications including cGMP (current Good Manufacturing Practice), cGLP (Good Laboratory Practice), ISO 9001, and ISO 13485 (Medical Device Quality Management System).
organisation Good Manufacturing Practice
• Certification Standards: Production is fully supervised by the Turkish Ministry of Health (T.C. Sağlık Bakanlığı) and has passed a series of international certifications including cGMP (current Good Manufacturing Practice), cGLP (Good Laboratory Practice), ISO 9001, and ISO 13485 (Medical Device Quality Management System).
organisation Good Laboratory Practice
• Certification Standards: Production is fully supervised by the Turkish Ministry of Health (T.C. Sağlık Bakanlığı) and has passed a series of international certifications including cGMP (current Good Manufacturing Practice), cGLP (Good Laboratory Practice), ISO 9001, and ISO 13485 (Medical Device Quality Management System).
organisation ISO 9001
• Certification Standards: Production is fully supervised by the Turkish Ministry of Health (T.C. Sağlık Bakanlığı) and has passed a series of international certifications including cGMP (current Good Manufacturing Practice), cGLP (Good Laboratory Practice), ISO 9001, and ISO 13485 (Medical Device Quality Management System).
organisation Core Products and Business Merkez İlaç
🧪 Core Products and Business Merkez İlaç follows its iconic slogan “#sağlıkiçinhijyenşart” (Hygiene is a prerequisite for health) and is the leader in Turkey for first aid, skin care, and disinfection products, with the most complete product categories and extremely high market share:
organisation • Produces
1. Disinfection and Anti-infection Series (core products): • Produces various professional and consumer skin disinfectants, hand sanitizers, anti-infection foams, surgical wipes, and wound cleansers (common brands include Opakjel and İsosol series).
organisation Opakjel
1. Disinfection and Anti-infection Series (core products): • Produces various professional and consumer skin disinfectants, hand sanitizers, anti-infection foams, surgical wipes, and wound cleansers (common brands include Opakjel and İsosol series).
organisation Starbaz
2. Over-the-Counter (OTC) Medicines and Ointments: • Produces skin ointments and creams, such as İhtamol ointment, Starbaz cream, İsosol ointment, Vitamin E, and baby diaper rash cream (Pişik Kremi) for skin care, burns, and eczema.
organisation First Aid and Medical Consumables: •
First Aid and Medical Consumables: •
organisation CMO
4. Contract Manufacturing (CMO): •
organisation Red Crescent
In international humanitarian aid (such as Red Crescent supplies and earthquake donations), it is also a major provider of medical supplies and surgical/first aid consumables in Turkey.
organisation DNS
The following DNS records were found for the victim's domain.
Intelligence Sources
Ransomware Live 2026-10-13