Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
MD5VerifiedSignal 56/100
18a7251ddde77ed24bc54700d84d9be1
Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Found in 2 reports: Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks; 黑客利用 CVE-2026-26980 攻陷 Ghost CMS，大量站点沦为 ClickFix 攻击帮凶
MD5 Hash
MD5 file hash associated with malicious samples.
MISP Category
Artifacts Dropped
Hash Algorithm
MD5
Confidence
75%
Signal Score
56 / 100
IDS Rule
Yes
Threat Context
Malware Families1
Tags
Feed Intelligence Summary
2 reports75% confidence
XLab
May 21, 2026
28 IOCs in report