Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
ARMORY CASTLE Exploits BeyondTrust
Threat Actors
Malware Families
Excerpt
Written by: Jayson Frost, Bryce Greathouse, Brian Meyer, John Palmisano, Rajesh Rajeshirke, Steve Rasch, John Wolfram Introduction On October 15, BeyondTrust disclosed a vulnerability, CVE-2026-102764, impacting BeyondTrust Remote Support (formerly Bomgar) appliances. BeyondTrust Remote Support is an enterprise secure remote access solution that enables IT teams to securely access and troubleshoot remote endpoints. The successful exploitation of this vulnerability results in…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-102764 | High | Score 64/100 | First seen |
| CVE | CVE-2023-46805 | High | Score 63/100 | First seen |
| SHA256 | 1f19b9a27d79c11bda00a1e8faf74a7fdd683d38ccef1b60df2fd0307e3aa462 | High | Score 70/100 | First seen |
| SHA256 | dc14e215269a93fdbc4c1a80b984c23faf7af0911c6dbb85309796a6f2ae95fb | High | Score 70/100 | First seen |
| CVE | CVE-2024-21887 | High | Score 63/100 | First seen |
| SHA256 | 194e0cb2a231aaf8e6b4bee93437c85b434dda7e327a5f483b79f7ff5bfcaa5e | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…