Threat actors target Qlik Sense with reverse shells

Threat actors targeted Qlik Sense servers with PowerShell reverse shell commands during a narrow window in October 2026, primarily against E.U.-based customers. The campaign attempted to stage exploits for Apache ActiveMQ and Veeam but was unsuccessful in delivering payloads. Organizations should monitor Qlik Sense deployments for suspicious activity and ensure patching of underlying vulnerabilities.