IOC Radar
TLP:WHITE2 IOCs

THREAT ADVISORY Russian APT “Laundry Bear” Exploiting OWA XSS for Persistent Mailbox Access August 5, 2026

BC
Blackswan Cybersecurity
Published August 5, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYTA488INFRASTRUCTUREunknownCAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure
Capability
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2025-66376
aptespionageexploit
Medium
59
Jun 3, 26
CVECVE-2026-42897
exploitintel-blogmalware
High
64
Jun 2, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
CVE
CVE2Actors1REPORTTHREAT ADVISORY Russian APTA488
scroll to zoom · drag to pan · click IOC to open