Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE2 IOCs
NSFOCUS Monthly APT Insights – April 2026
Threat Actors
Diamond Model
Adversary(2)
Infrastructure
Capability
Victim
Indicators of Compromise
2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-21509 | High | Score 79/100 | First seen |
| CVE | CVE-2026-21513 | Medium | Score 56/100 | First seen |
IOC Relationship Graph
2 total IOCs
CVE
scroll to zoom · drag to pan · click IOC to open