Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE3 IOCs
Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
Threat Actors
Malware Families
Diamond Model
Adversary(1)
Infrastructure
Capability(9)
Victim
Indicators of Compromise
Indicators of Compromise3
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2020-1472 c2exploitintel-blog | Medium | 50 | Jun 19, 26 |
| CVE | CVE-2025-24799 exploitintel-blogmalware | Medium | 51 | Oct 9, 26 |
| CVE | CVE-2025-2479 exploitintel-blogmalware | Medium | 51 | Oct 9, 26 |
IOC Relationship Graph
IOC Relationship Graph3 total IOCs
CVE