Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
China-nexus Threat Actor Targets Arabian Gulf Region With PlugX
Malware Families
Excerpt
IntroductionOn March 1, 2026, ThreatLabz observed new activity from a China-nexus threat actor targeting countries in the Arabian Gulf region. The activity took place within the first 24 hours of the renewed conflict in the Middle East. The threat actor quickly weaponized the theme of the conflict, using an Arabic-language document lure depicting missile attacks for social engineering.The campaign used a multi-stage attack chain that ultimately deployed a PlugX backdoor…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://www.360printsol.com/2026/alfadhalah/thumbnail?img=index.png | High | Score 63/100 | First seen |
| IP | 91.193.17.117 | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…