Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Cyber Conflict Briefing Q4 2025

DCSO CyTec Blog
DCSO CyTec Blog
Published February 13, 2026Original Report

Threat Actors

Malware Families

Excerpt

About the Briefing The European Repository of Cyber Incidents (EuRepoC) collects information and knowledge on cyber conflicts. Once every quarter, the researchers, together with DCSO, analyze the most recent cyber operations in Tagesspiegel Background Cybersecurity and present the key trends. The Cyber Conflict Briefing summarizes the key trends, dynamics, and findings related to the cyber operations documented by the European Repository of Cyber Incidents (EuRepoC) in each…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT28APT31Lazarus GroupINFRASTRUCTUREunknownCAPABILITYCl0pGh0st RATMedusaVICTIMunknown
Adversary(5)
Infrastructure
Capability(4)
Victim

Attack Flow10 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1566
1/10
Phishing
ActionPhishing for employees
Actors are suspected of using spearphishing campaigns targeting recruitment and hiring processes, potentially involving fake remote employees.

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2025-10035MediumScore 57/100First seen

IOC Relationship Graph

Building graph…