Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849)
Malware Families
Excerpt
BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849) | Sansec 112) { this.ssScrolled = true; } else if (window.pageYOffset Scan your store now Scan your store now Product Pricing Resources Research Partners Guides Malware Company Contact Product Pricing Resources Company Contact Research Partners Support Scan your store now! BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849) by Sansec Forensics Team Published in Threat Research − October 15, 2026…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-75650 | High | Score 72/100 | First seen |
| CVE | CVE-2026-103849 | Medium | Score 54/100 | First seen |
| CVE | CVE-2025-54236 | High | Score 61/100 | First seen |
IOC Relationship Graph
Building graph…