Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE3 IOCs
Chinese Hackers Chain Chrome and Windows Zero-Days to Deploy Backdoors and Steal Credentials
Threat Actors
Diamond Model
Adversary(2)
Infrastructure
Capability
Victim
Indicators of Compromise
Indicators of Compromise3
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-85046 exploitintel-blogmalware | High | 69 | Sep 4, 26 |
| CVE | CVE-2026-85880 exploitintel-blogresearched | Medium | 58 | Sep 9, 26 |
| CVE | CVE-2026-87491 exploitintel-blogvulnerability | High | 59 | Sep 10, 26 |
IOC Relationship Graph
IOC Relationship Graph3 total IOCs
CVE