Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
AI Security Incident Case: Trusted AI Platforms Become a New Channel for Malware Distribution
Excerpt
Overview On September 11, 2026, the Huntress SOC released a set of cases tracked over a nine-month period. The conclusion ran counter to their own expectations: what is currently being exploited more frequently in the AI domain is not the models or the AI companies themselves, but rather the everyday AI features that users rely on. Attackers accomplished this by chaining three components together: publicly shareable AI content, open lightweight applications, and paid search…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | polse.us | High | Score 74/100 | First seen |
| Domain | download-app.us | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…