Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
CVEVerifiedSignal 79/100EPSS 99.9%
CVE-2023-34362
Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Found in 18 reports: PHP2Shell Was Exploited Before the Patch; AI-Assisted Cyberespionage Campaign Targets Government Systems; Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain · all 18 reports
CVE
Known vulnerability being actively exploited in the wild.
MISP Category
vulnerability
EPSS Score
99.93%
EPSS Percentile
100.0th
Confidence
85%
Signal Score
79 / 100
IDS Rule
No
CVE Intelligence
Exploit Probability99.93%
100.0th percentile of all CVEs
Threat Context
Threat Actors37
Malware Families44
Tags
Feed Intelligence Summary
18 reports85% confidence
PolySwarm
Oct 19, 2026
69 IOCs in report
PolySwarm
Oct 16, 2026
Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools
39 IOCs in report
PolySwarm
Oct 13, 2026
52 IOCs in report
PolySwarm
Oct 9, 2026
32 IOCs in report
PolySwarm
Oct 5, 2026
Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations
47 IOCs in report
PolySwarm
Oct 2, 2026
34 IOCs in report
Activity Timeline
Threat Activity Heatmap
Related Reports
PHP2Shell Was Exploited Before the Patch
Sekoia Blog6 IOC
AI-Assisted Cyberespionage Campaign Targets Government Systems
PolySwarm33 IOC
Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain
PolySwarm69 IOC
Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools
PolySwarm39 IOC
Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.
Huntress1 IOC
ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure
PolySwarm52 IOC
China Linked Warlock Ransomware Campaign Targets Critical Infrastructure
PolySwarm32 IOC
Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations
PolySwarm47 IOC
Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer
PolySwarm34 IOC
CLOSEDQUORUM: Malware Puts AI in the C2 Loop
PolySwarm35 IOC