Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
17 IOCs
CVE-2026-104286: FortiMail Path Traversal Vulnerability Actively Exploited
Excerpt
Successful exploitation may let an unauthenticated attacker send a crafted request that tricks FortiMail into writing a file outside its intended folder. By placing a file onto the underlying system, the attacker gains a way to run commands on the device itself. This can lead to full control of the mail gateway, exposing stored mail, credentials, and other systems it connects to. CVE CVE-2026-104286 Affected Products FortiMail 8.0 through 8.0.1 FortiMail 7.6 through 7.6.6…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →17 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 79.141.169.187 | High | Score 68/100 | First seen |
| MD5 | 5241738a3e9988404239e12243f6d35b | Medium | Score 53/100 | First seen |
| MD5 | 64c90a00c7fda4d5c7973ed64c25783a | Medium | Score 53/100 | First seen |
| IP | 45.129.0.192 | High | Score 63/100 | First seen |
| SHA256 | 4000276a150a165d3c2537d1e19fb393c4de8333076a16655e28059cae82157b | High | Score 56/100 | First seen |
| MD5 | 8eb64f25d2a8e18e05aae058629473cf | Medium | Score 53/100 | First seen |
| MD5 | 49a7156a7d043cc8f9f680579db22f86 | Medium | Score 53/100 | First seen |
| MD5 | ae0ea6502d3fa5f0664bceb73189eb54 | Medium | Score 53/100 | First seen |
| SHA256 | 703e97c64e61e41dc3aaba580d82bb2aa7b6a11b54ee6fb467ed5d5a3bffdef5 | High | Score 56/100 | First seen |
| SHA256 | 77324ac428bde86d351fc5fc06f6d64a6bfe737dfb2743df1d4c5ac2418a5b6a | Medium | Score 52/100 | First seen |
| SHA256 | 8015f34dc84922b03688399d7f9fe7a00361789f7e420c7e2a2cdb23e75cef84 | Medium | Score 52/100 | First seen |
| CVE | CVE-2026-104286 | High | Score 66/100 | First seen |
| MD5 | 61af1c4bce1c2eebc8ff689ca5337791 | Medium | Score 53/100 | First seen |
| SHA256 | 7a6cea9f5c9e2e9994d4e3c4da73f86cf5acd05ea5d312c066c9d1dafd69ee38 | High | Score 56/100 | First seen |
| SHA256 | d6fe51c22b91776f4c961ea58bcac5917f15d560a619d7ce726d3d51795609d3 | Medium | Score 52/100 | First seen |
| MD5 | f90fa81a5f521d785f2b2f765e3ab897 | Medium | Score 53/100 | First seen |
| SHA256 | 8953ec7960b09f544a880b072ad4e6cfda7a8303f486251d3478dcfdfbac23b6 | High | Score 56/100 | First seen |
IOC Relationship Graph
Building graph…