IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE12 IOCs

2026 Ransomware Cartelization: Qilin, LockBit and Akira Convergence

SB
Secure Blink
Published March 2, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAkiraBlack BastaBlackCatINFRASTRUCTUREunknownCAPABILITYAkiraBlack BastaBlackCatVICTIMunknown
Adversary(8)
Infrastructure
Capability(13)
Victim

Indicators of Compromise

Indicators of Compromise12

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2024-40711
exploitintel-blogmalware
Medium
53
Jul 6, 26
CVECVE-2020-3259
exploitintel-blogmalware
Medium
51
Oct 9, 26
CVECVE-2025-0282
exploitintel-blogmalware
Medium
59
Jun 3, 26
CVECVE-2024-21762
exploitintel-blogmalware
Medium
56
Jun 25, 26
CVECVE-2023-27532
exploitintel-blogmalware
Medium
54
Oct 9, 26
CVECVE-2023-3519
exploitintel-blogmalware
High
63
Jun 2, 26
CVECVE-2025-6543
exploitintel-blogmalware
Medium
58
Sep 30, 26
CVECVE-2025-22457
exploitintel-blogmalware
Medium
51
Oct 9, 26
CVECVE-2023-20269
exploitintel-blogmalware
Medium
51
Oct 9, 26
CVECVE-2025-7776
exploitintel-blogmalware
Medium
51
Oct 9, 26
CVECVE-2025-7775
exploitintel-blogmalware
Medium
51
Oct 9, 26
CVECVE-2024-40766
exploitintel-blogloader
High
80
Sep 9, 26

IOC Relationship Graph

IOC Relationship Graph12 total IOCs
CVE
CVE12Actors5Malware5REPORT2026 Ransomware CartelizatAkiraBlack BastaBlackCatContiDarkSideAkiraBlack BastaBlackCatBumblebeeCobalt Strike
scroll to zoom · drag to pan · click IOC to open