Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE4 IOCs
CVE-2026-67276: MikroTik RouterOS SSH Zero-Day Exploited in Router Takeover Attacks
Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Indicators of Compromise4
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-86060 exploitintel-blogmalware | High | 68 | Sep 6, 26 |
| CVE | CVE-2026-67276 exploitintel-blogvulnerability | Medium | 58 | Sep 6, 26 |
| IP | 103.102.31.18 exploitintel-blognetwork | High | 58 | Sep 8, 26 |
| IP | 82.192.72.4 exploitintel-blognetwork | High | 58 | Sep 8, 26 |
IOC Relationship Graph
IOC Relationship Graph4 total IOCs
CVEIP