Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
CVEHighVerifiedSignal 82/100EPSS 1.1%
CVE-2024-7344
First Seen
Oct 9, 2026
Last Seen
Oct 14, 2026
Found in 11 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
CVE
Known vulnerability being actively exploited in the wild.
MISP Category
vulnerability
EPSS Score
1.07%
EPSS Percentile
63.9th
Confidence
88%
Signal Score
82 / 100
IDS Rule
No
CVE Intelligence
Exploit Probability1.07%
63.9th percentile of all CVEs
Threat Context
Threat Actors37
Malware Families42
Tags
Feed Intelligence Summary
11 reports88% confidence
PO
PolySwarm
Yesterday
52 IOCs in report
PO
PolySwarm
6d ago
32 IOCs in report
PO
PolySwarm
Oct 5, 2026
Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations
47 IOCs in report
PO
PolySwarm
Oct 2, 2026
34 IOCs in report
PO
PolySwarm
Sep 21, 2026
43 IOCs in report
PO
PolySwarm
Sep 14, 2026
39 IOCs in report
PO
PolySwarm
Sep 11, 2026
41 IOCs in report
Activity Timeline
Oct 13Sep 8
Threat Activity Heatmap
· Peak: 2026-09-21LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
2
Minimal
30d
8
Elevated
3mo
11
Elevated
Threat ScoreHigh Risk
82
SIGNAL
Signal Score
88%
Confidence
11
Reports
First seenOct 9, 2026
Last seenOct 14, 2026
Verified IOC
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 6 days ago · Last seen today
Appeared in 11 threat reports from 10 sources
Associated with: REvil, Gamaredon, APT38, Akira, APT28, APT33, APT41, APT35, DEV-0569, Scattered Spider, APT37, APT29, APT34, Salt Typhoon, FIN8, MuddyWater, UNC1549, BlackCat, NoName057, Royal, Conti, LockBit, Killnet, TA577, Play, Hive, Turla, Cl0p, Kimsuky, APT31, TA412, Black Basta, Volt Typhoon, Ember Bear, DarkSide, Lazarus Group, Sandworm
Used by malware: Hive, Akira, Rhysida, Remcos, Bumblebee, LockBit, Play, QakBot, Medusa, Stealc, Mirai, Vidar, XWorm, Black Basta, BlackCat, AsyncRAT, Conti, Royal, DarkSide, META Stealer, Cobalt Strike, Rhadamanthys, Gh0st RAT, Lumma, SocGholish, Mythic, Ursnif, BazarLoader, AcidRain, INC Ransom, NotPetya, IcedID, Emotet, RedLine, PlugX, CaddyWiper, REvil, Brute Ratel, WhisperGate, Cl0p, HermeticWiper, NjRAT