Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting
Threat Actors
Malware Families
Excerpt
Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting - The DFIR Report Read our latest report Click here X Public Reports Products Products Overview Threat Intel Threat Feed Private DFIR Reports All Intel Active Defense DFIR Labs Case Artifacts - Detection Pack AI Training Ground - bruteratel From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion Read More - dragonforce Blurring the Lines: Intrusion Shows Connection With Three Major…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(1)
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-9501 | Medium | Score 51/100 | First seen |
| CVE | CVE-2025-55182 | High | Score 82/100 | First seen |
| URL | https://s3.filebase.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…