IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE3 IOCs

Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

RA
Rapid7
Published September 25, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayINFRASTRUCTUREunknownCAPABILITYMETA StealerMetasploitPlayVICTIMunknown
Adversary(1)
Infrastructure
Capability(3)
Victim

Indicators of Compromise

Indicators of Compromise3

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-85706
exploitintel-blogmalware
High
76
Sep 11, 26
CVECVE-2026-18729
exploitintel-blogmalware
Medium
51
Oct 9, 26
CVECVE-2026-20929
exploitintel-blogmalware
Medium
54
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph3 total IOCs
CVE
CVE3Actors1Malware3REPORTMetasploit Wrap Up: BelgiaPlayMETA StealerMetasploitPlay
scroll to zoom · drag to pan · click IOC to open