IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE1 IOC

Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners

SS
Step Security
Published September 2, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayINFRASTRUCTUREunknownCAPABILITYMETA StealerPlayVICTIMunknown
Adversary(1)
Infrastructure
Capability(2)
Victim

Indicators of Compromise

Indicators of Compromise1

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2025-8217
exploitintel-blogmalware
Medium
51
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph1 total IOCs
CVE
CVE1Actors1Malware2REPORTRuntime Security for AWS CPlayMETA StealerPlay
scroll to zoom · drag to pan · click IOC to open