Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
CVEHighVerifiedSignal 80/100EPSS 94.4%
CVE-2021-44228
First Seen
Jun 5, 2026
Last Seen
Oct 10, 2026
Found in 11 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
CVE
Known vulnerability being actively exploited in the wild.
MISP Category
vulnerability
EPSS Score
94.36%
EPSS Percentile
100.0th
Confidence
85%
Signal Score
80 / 100
IDS Rule
No
CVE Intelligence
Exploit Probability94.36%
100.0th percentile of all CVEs
Threat Context
Feed Intelligence Summary
11 reports85% confidence
PU
Pulsedive
Jul 16, 2026
2 IOCs in report
GR
GreyNoise
Feb 22, 2026
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-02-20
9 IOCs in report
GR
GreyNoise
Feb 7, 2026
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-02-06
6 IOCs in report
GR
GreyNoise
Jan 10, 2026
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-01-09
19 IOCs in report
HU
Huntress
Dec 10, 2021
1 IOC in report
Activity Timeline
Oct 10Dec 10
Threat Activity Heatmap
· Peak: 2026-01-10LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
2
Minimal
30d
3
Moderate
3mo
4
Moderate
Intelligence SummaryAI Generated
The recently identified indicator of compromise, CVE-
Threat ScoreHigh Risk
80
SIGNAL
Signal Score
85%
Confidence
11
Reports
First seenJun 5, 2026
Last seenOct 10, 2026
Verified IOC
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 4 months ago · Last seen 1 day ago
Appeared in 11 threat reports from 10 sources
Associated with: Sandworm, Conti, LockBit, Akira, APT27, TEMP.HIPPO, APT41, Cl0p, Play, BlackCat
Used by malware: Frp, LaZagne, ADFind, XMRig, Akira, Play, LockBit, BlackCat, Conti, Mimikatz, Fscan, PsExec, SecretsDump, Impacket, META Stealer, Cobalt Strike, Lumma, Gh0st RAT, PlugX, Cl0p