Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra . Rather than possessing the mandatory 384 bits of pseudo-random security, several private keys evaluated single-digit and double-digit integers. This misconfiguration allows an attacker with the private key of any of the compromised intermediate CAs to impersonate any website or service. Six of the TLS certificates, trusted by Chrome, Mozilla, and…
Read the original report →Indicators of Compromise
Open the mindmap →9 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 4b2460a466f95fd40113bcdcca2ceb29b3b093921de45474da7df48874c630b1 | Medium | Score 53/100 | First seen |
| SHA256 | cb6e15165ac802e9b3f993f16c25d41f4e81c21ebde71ae1b012ac00bf9c7c3f | Medium | Score 53/100 | First seen |
| SHA256 | 9e39de2881273acc225a149c72ba3e0f51424963669ab633ee1dc7df5db067b4 | Medium | Score 53/100 | First seen |
| SHA256 | 42c4accd12c4f59597925e1a08a7a90102608543809308d50ec427e118ba1493 | Medium | Score 53/100 | First seen |
| CVE | CVE-2026-111943 | Medium | Score 54/100 | First seen |
| SHA256 | 432ec25f0d28de9006d97bf752f17bbb2cd41f669933fcb072d9a1148d0261f3 | Medium | Score 53/100 | First seen |
| SHA256 | 98b896625c0c230adeec3eb2cf6aad5001ecf9156a68644e82374ce5833bc25b | Medium | Score 53/100 | First seen |
| SHA256 | e7568fe6e12331f4fd7de61da4c7559d0f8eb192a218d4741a3ba75184333838 | Medium | Score 53/100 | First seen |
| SHA256 | 0164d7ceae5bb909c272af151ff44b1177ae9b47d9424b94f1d9558c30934d19 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…