Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
6 IOCs

Brevo supply chain attack hits 100k+ sites with Wordpress backdoors and Clickfix malware

Sansec
Sansec
Published September 16, 2026Original Report

Malware Families

Excerpt

Brevo supply chain attack hits 100k+ sites with Wordpress backdoors and Clickfix malware | Sansec 112) { this.ssScrolled = true; } else if (window.pageYOffset Scan your store now Scan your store now Product Pricing Resources Research Partners Guides Malware Company Contact Product Pricing Resources Company Contact Research Partners Support Scan your store now! Brevo supply chain attack hits 100k+ sites with Wordpress backdoors and Clickfix malware by Sansec Forensics Team…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYCobalt StrikeMETA StealerVICTIMunknown
Adversary
Infrastructure
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

6 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA256f67d572d2d30407b3f470904326411450763108980cdad89550fbb221fb06782MediumScore 53/100First seen
SHA25658a5c601c9df7ca2120435588fc39f97712d9b878795f6ee500590099a432308MediumScore 53/100First seen
SHA256fe8447fd1ec4dca652b71db2c749fcc24a5bec3875f3654042169fb2418aed09MediumScore 53/100First seen
SHA2564af488d79aef7daa12b1c18f0cce28b7edadccb8b6b0fb8d50d1d53a9a7c2df7MediumScore 53/100First seen
SHA2569b62c12bc5c7feb9802f58e6cf75a368690df3c754e37cc64483a92acacf87a5MediumScore 53/100First seen
SHA25626166cd87ff07e7a50317a24126d14b262e842c5715585636dee3ab3f227ddcaMediumScore 53/100First seen

IOC Relationship Graph

Building graph…