IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

The Next MOVEit May Already Be in Your File Transfer Queue

RE
ReversingLabs
Published October 15, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT29Cl0pINFRASTRUCTUREunknownCAPABILITYCl0pMETA StealerMedusaVICTIMunknown
Adversary(2)
Infrastructure
Capability(3)
Victim

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2025-10035
exfiltrationexploitintel-blog
Medium
57
Jun 2, 26
CVECVE-2025-61882
exploitintel-blogmalware
High
62
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
CVE
CVE2Actors2Malware3REPORTThe Next MOVEit May AlreadAPT29Cl0pCl0pMETA StealerMedusa
scroll to zoom · drag to pan · click IOC to open