Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE4 IOCs
PHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619)
Malware Families
Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-109618 | High | Score 80/100 | First seen |
| CVE | CVE-2026-75650 | High | Score 69/100 | First seen |
| CVE | CVE-2026-103849 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-109619 | High | Score 75/100 | First seen |
IOC Relationship Graph
4 total IOCs
CVE
scroll to zoom · drag to pan · click IOC to open