Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE6 IOCs
Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit
Threat Actors
Malware Families
Diamond Model
Adversary(1)
Infrastructure(4)
Capability(1)
Victim
Indicators of Compromise
6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | asecdns.com | High | Score 86/100 | First seen |
| SHA256 | 6897b649f29e54d8910459963bbf94ed5c7a4fe66a56bc5962540b226b8e48c4 | High | Score 85/100 | First seen |
| Domain | dnsrecursive.eu | Medium | Score 43/100 | First seen |
| CVE | CVE-2026-42897 | High | Score 69/100 | First seen |
| Domain | acocdn.com | High | Score 86/100 | First seen |
| Domain | tdndns.com | Medium | Score 43/100 | First seen |
IOC Relationship Graph
6 total IOCs
DomainSHA256CVE
scroll to zoom · drag to pan · click IOC to open