Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
CVEVerifiedSignal 82/100EPSS 82.0%
Open in CVE Radar

CVE-2025-55182

Confidence: high. · Confidence scores are heuristic. Verify before acting on results.

Jun 2
First Seen
2026
Oct 26
Last Seen
2026
40
Reports
linked reports
89%
Confidence
high

Found in 40 reports: Abuse.ch URLhaus (5000 entries); ORKL Report; AI-Assisted Cyberespionage Campaign Targets Government Systems · all 40 reports

CVE
Known vulnerability being actively exploited in the wild.
MISP Category
vulnerability
EPSS Score
82.01%
EPSS Percentile
99.2th
Confidence
89%
Signal Score
82 / 100
IDS Rule
No
CVE Intelligence
Exploit Probability82.01%
99.2th percentile of all CVEs
Threat Context
Tags

Feed Intelligence Summary

40 reports89% confidence
Abuse.ch URLhaus
Abuse.ch URLhaus
Abuse.ch URLhaus (5000 entries)
4477 IOCs in report
ORKL Threat Library
ORKL Threat Library
ORKL Report
106 IOCs in report
PolySwarm
PolySwarm
4d ago
AI-Assisted Cyberespionage Campaign Targets Government Systems
33 IOCs in report
PolySwarm
PolySwarm
Oct 19, 2026
Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain
69 IOCs in report
PolySwarm
PolySwarm
Oct 16, 2026
Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools
39 IOCs in report
Palo Alto Networks
Palo Alto Networks
Oct 15, 2026
AI-Powered Espionage Campaign Targets Government Linux Infrastructure
39 IOCs in report
Wiz
Wiz
Oct 14, 2026
ASPM in the AI Era Part 1: Unified Visibility Across Your Stack
1 IOC in report
PolySwarm
PolySwarm
Oct 13, 2026
ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure
52 IOCs in report
PolySwarm
PolySwarm
Oct 9, 2026
China Linked Warlock Ransomware Campaign Targets Critical Infrastructure
32 IOCs in report
PolySwarm
PolySwarm
Oct 5, 2026
Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations
47 IOCs in report

Activity Timeline

Threat Activity Heatmap

Threat ScoreHigh Risk
82
SIGNAL
Signal Score
89%
Confidence
40
Reports
Verified IOC

Export & API

STIX 2.1 Bundle
CSV Export

IOC Journey

Appeared in 40 linked reports
Associated with: UNC5174, NoName057, Royal, Hive, Play, APT31, TA412, APT33, APT28, Gamaredon, Turla, Black Basta, Volt Typhoon, Ember Bear, DarkSide, Lazarus Group, Conti, Kimsuky, Killnet, TA577, REvil, APT35, Cl0p, DEV-0569, Scattered Spider, APT41, LockBit, Akira, Sandworm, APT38, APT37, APT34, Salt Typhoon, FIN8, MuddyWater, UNC1549, BlackCat, APT29
Used by malware: Hive, Play, Pikabot, TrickBot, Medusa, Royal, Fscan, LinPEAS, Mimikatz, QakBot, NetScan, META Stealer, Mythic, Remcos, NotPetya, Gh0st RAT, IcedID, RedLine, XMRig, SocGholish, Ursnif, Black Basta, AcidRain, INC Ransom, Stealc, Conti, Akira, BazarLoader, LockBit, Vidar, Bumblebee, PlugX, CaddyWiper, DarkSide, REvil, Brute Ratel, WhisperGate, Cl0p, Cobalt Strike, Rhadamanthys, Lumma, Mirai, Emotet, BlackCat, NjRAT, XWorm, Rhysida, AsyncRAT, HermeticWiper