IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
CVEHighVerifiedSignal 82/100EPSS 99.8%

CVE-2025-53771

First Seen
Oct 9, 2026
Last Seen
Oct 10, 2026
Oct 9
First Seen
2d ago
Oct 10
Last Seen
yesterday
13
Reports
source reports
89%
Confidence
high
Found in 13 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
CVE
Known vulnerability being actively exploited in the wild.
MISP Category
vulnerability
EPSS Score
99.81%
EPSS Percentile
100.0th
Confidence
89%
Signal Score
82 / 100
IDS Rule
No
CVE Intelligence
Exploit Probability99.81%
100.0th percentile of all CVEs
Threat Context
Tags

Feed Intelligence Summary

13 reports89% confidence
PO
PolySwarm
2d ago
China Linked Warlock Ransomware Campaign Targets Critical Infrastructure
32 IOCs in report
PO
PolySwarm
6d ago
Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations
47 IOCs in report
PO
PolySwarm
Oct 2, 2026
Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer
34 IOCs in report
SY
Symantec
Oct 1, 2026
Warlock Ransomware Attackers Hit Water and Telecom Operators
29 IOCs in report
PO
PolySwarm
Sep 28, 2026
CLOSEDQUORUM: Malware Puts AI in the C2 Loop
35 IOCs in report
PO
PolySwarm
Sep 25, 2026
FamousSparrow Takes Flight with New SparroWocky Backdoor
30 IOCs in report
PO
PolySwarm
Sep 21, 2026
China and the Cyber Arms Race for AI Supremacy
31 IOCs in report
PO
PolySwarm
Sep 21, 2026
BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns
43 IOCs in report
PO
PolySwarm
Sep 14, 2026
Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware
39 IOCs in report
PO
PolySwarm
Sep 11, 2026
BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace
41 IOCs in report

Activity Timeline

13 total obs
Oct 9Jul 21

Threat Activity Heatmap

· Peak: 2026-09-21
Less
More
Mon
Wed
Fri
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
·
Jul
·
·
·
Aug
·
·
·
·
Sep
·
·
·
24h
0
Dormant
7d
2
Minimal
30d
9
Elevated
3mo
11
Elevated
Threat ScoreHigh Risk
82
SIGNAL
Signal Score
89%
Confidence
13
Reports
First seenOct 9, 2026
Last seenOct 10, 2026
Verified IOC

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 2 days ago · Last seen 1 day ago
Appeared in 13 threat reports from 10 sources
Associated with: Scattered Spider, BlackCat, Play, Akira, NoName057, Kimsuky, Royal, Conti, LockBit, Killnet, TA577, REvil, Gamaredon, APT38, APT28, APT33, APT41, APT35, Cl0p, DEV-0569, APT37, APT29, APT34, Salt Typhoon, FIN8, MuddyWater, UNC1549, Turla, Hive, APT31, TA412, Black Basta, Volt Typhoon, Ember Bear, DarkSide, Lazarus Group, Sandworm
Used by malware: Hive, CrackMapExec, Pikabot, XMRig, Akira, Rhysida, Remcos, Chisel, Play, Bumblebee, LockBit, TrickBot, Stealc, Mirai, Vidar, XWorm, AsyncRAT, Black Basta, QakBot, BlackCat, Medusa, Conti, Royal, DarkSide, PsExec, META Stealer, Cobalt Strike, SocGholish, Rhadamanthys, Lumma, Mythic, Gh0st RAT, Ursnif, BazarLoader, AcidRain, INC Ransom, NotPetya, IcedID, Emotet, RedLine, PlugX, CaddyWiper, REvil, Brute Ratel, WhisperGate, Cl0p, HermeticWiper, NjRAT