Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE6 IOCs
The NetScaler Zero-Day Siege and Pre-Auth RCE Chains : Technical Analysis and Exposure Assessment
Malware Families
Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Indicators of Compromise6
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-19490 exploitintel-blogmalware | Medium | 56 | Aug 20, 26 |
| CVE | CVE-2026-88773 exploitintel-blogmalware | High | 61 | Sep 28, 26 |
| CVE | CVE-2026-88772 ddosexploitintel-blog | High | 81 | Sep 28, 26 |
| CVE | CVE-2026-88778 exploitintel-blogmalware | High | 74 | Sep 28, 26 |
| CVE | CVE-2026-88771 ddosexploitintel-blog | High | 82 | Sep 27, 26 |
| CVE | CVE-2026-19489 ddosexploitintel-blog | Medium | 56 | Aug 21, 26 |
IOC Relationship Graph
IOC Relationship Graph6 total IOCs
CVE