Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE2 IOCs
Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in Chained Attacks
Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Indicators of Compromise2
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-104935 exploitintel-blogmalware | High | 59 | Oct 13, 26 |
| IP | 108.165.147.64 active scanaptasia | Medium | 58 | Sep 30, 26 |
IOC Relationship Graph
IOC Relationship Graph2 total IOCs
CVEIP