IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE13 IOCs

StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack

SA
Sansec
Published September 5, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYCobalt StrikeMETA StealerVICTIMunknown
Adversary
Infrastructure
Capability(2)
Victim

Indicators of Compromise

13 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA256d61217ca0bca83204302fa7b41935ce36f73764559c156d5c980f2fedddffb6eMediumScore 53/100First seen
SHA25664bcb4426783e2b4f8ec68b2f63e42cf4b404af6cd65c4c47f5ae3ac0a3d439eMediumScore 53/100First seen
SHA2564352cabaa451e5a894535fbcc4d46628701303322a13745cb5479d7d0534ae8eMediumScore 43/100First seen
SHA256b79dfdc1eed860e0b76c629d6adfce251db379b0b45a6d728d4ef483f7551420MediumScore 53/100First seen
CVECVE-2026-75650HighScore 72/100First seen
SHA2561a3374ffac5b0a62467612f264c49792d206304d4514409c982325c91231375dMediumScore 53/100First seen
MD5fced27f6d57702565353ecc11722533bMediumScore 53/100First seen
SHA256e315687a1dfe61ef4a5a5642214db6d3b2b05d81391285eebc2af664641a26a7MediumScore 53/100First seen
SHA256d2fbf9eb75c495bfea48790d3b228fab0c15a282419c3d3f5e49294c4e1a3e82MediumScore 43/100First seen
CVECVE-2025-54236HighScore 61/100First seen
SHA256d94f75a70b5cabaf786ac57177ed841732e62bdcc9a29e06e5b41d9be567bcfaHighScore 60/100First seen
SHA2568cef8dcac2bb4598fb821859deb61c9b6889b4bdad00498a38d113954334bbb3MediumScore 53/100First seen
SHA1b183335f5474b15df95c48ca781e75c27e704ac2MediumScore 53/100First seen

IOC Relationship Graph

13 total IOCs
SHA256CVEMD5SHA1
SHA2569CVE2MD51SHA11Malware2StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attackREPORTd61217ca0bca83204302…64bcb4426783e2b4f8ec…4352cabaa451e5a89453…b79dfdc1eed860e0b76c…1a3374ffac5b0a624676…e315687a1dfe61ef4a5a…d2fbf9eb75c495bfea48…d94f75a70b5cabaf786a…8cef8dcac2bb4598fb82…CVE-2026-75650CVE-2025-54236fced27f6d57702565353…b183335f5474b15df95c…Cobalt StrikeMETA Stealer
scroll to zoom · drag to pan · click IOC to open