Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE2 IOCs
THREAT ADVISORY Russian APT “Laundry Bear” Exploiting OWA XSS for Persistent Mailbox Access August 5, 2026
Threat Actors
Diamond Model
Adversary(1)
Infrastructure
Capability
Victim
Indicators of Compromise
2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-66376 | High | Score 66/100 | First seen |
| CVE | CVE-2026-42897 | High | Score 69/100 | First seen |
IOC Relationship Graph
2 total IOCs
CVE
scroll to zoom · drag to pan · click IOC to open