Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Chinese-Speaking Hackers Exploit Known Flaws to Steal Philippine Nuclear and Naval Data
Excerpt
Suspected Chinese-speaking hackers exploited known vulnerabilities to steal sensitive data from a Philippine nuclear research organization and a marine engineering company serving the Philippine Navy. Researchers at Hunt.io discovered an exposed attacker server on August 13, 2026, containing custom exploit scripts, stolen files, logs, and offensive tools. The activity comes amid heightened South China Sea tensions and continued cyber espionage targeting Philippine government,…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2023-49105 | Medium | Score 51/100 | First seen |
| IP | 31.58.209.241 | Medium | Score 40/100 | First seen |
| CVE | CVE-2024-28000 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…