Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Creepy Crawlers: Hunting Those Who Hunt For WordPress Plugins
Excerpt
We were engaging in some routine clustering on untagged or only-generically-tagged HTTP traffic when a fun pattern jumped out: thousands of requests hitting /wp-content/plugins/*/readme.txt . It doesn’t take a cybersecurity wonk to come to the conclusion that this is basic WordPress plugin enumeration. The reason this stood out is that it showed up under the generic “Web Crawler” tag (and, only that tag), meaning we don’t currently classify this as the enumeration that it is.…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-12450 | Medium | Score 51/100 | First seen |
| CVE | CVE-2024-28000 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…