Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE3 IOCs
Critical WordPress wp2shell Flaw Lets Anonymous Attackers Execute Remote Code
Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Indicators of Compromise3
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | wp2shell.com intel-blogmalwarenetwork | High | 58 | Jul 19, 26 |
| CVE | CVE-2026-63030 aptespionageexploit | High | 70 | Jul 19, 26 |
| CVE | CVE-2026-60137 aptespionageexploit | High | 67 | Jul 19, 26 |
IOC Relationship Graph
IOC Relationship Graph3 total IOCs
DomainCVE