Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA1VerifiedSignal 56/100
9434fe686801742ef7d6da248fb0b900dc32208a
Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Found in 2 reports: Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks; 黑客利用 CVE-2026-26980 攻陷 Ghost CMS，大量站点沦为 ClickFix 攻击帮凶
SHA-1 Hash
SHA-1 file hash associated with malicious samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA1
Confidence
75%
Signal Score
56 / 100
IDS Rule
Yes
Threat Context
Malware Families1
Tags
Feed Intelligence Summary
2 reports75% confidence
XLab
May 21, 2026
28 IOCs in report