Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
7 IOCs
CVE-2026-85097: Bricksforge WordPress Plugin Flaw Exploited for Unauthenticated RCE
Excerpt
CVE-2026-85097: Bricksforge WordPress Plugin Flaw Exploited for Unauthenticated RCE Threat actors are actively exploiting CVE-2026-85097 , a maximum-severity (CVSS 10.0) vulnerability in the Bricksforge plugin for WordPress. The flaw lets unauthenticated attackers upload and execute arbitrary PHP code on vulnerable sites, resulting in remote code execution (RCE). Patchstack first observed exploitation attempts on October 7, 2026, at 21:47 UTC. Bricksforge versions up to and…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →7 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 177.75.57.20 | High | Score 58/100 | First seen |
| IP | 153.75.90.146 | High | Score 58/100 | First seen |
| IP | 150.109.16.166 | High | Score 58/100 | First seen |
| IP | 23.97.62.146 | High | Score 58/100 | First seen |
| IP | 38.154.185.97 | High | Score 58/100 | First seen |
| CVE | CVE-2026-85097 | Medium | Score 51/100 | First seen |
| IP | 84.247.60.125 | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…