Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
14 IOCs

Edge Infrastructure Under Siege: What Two Independent Datasets Reveal About Who’s Exploiting Your Perimeter

SentinelOne Blog
SentinelOne Blog
Published August 26, 2026Original Report

Threat Actors

Malware Families

Excerpt

A joint Tenable-SentinelOne analysis of 93 CVE-actor attribution pairs reveals that both state-sponsored actors and cybercriminals independently converge on the same edge infrastructure. It is the shared attack surface where state-sponsored threat actors and financially motivated criminal groups independently converge — not the province of a single adversary category, and not exclusively a nation-state problem, despite two years of headlines about China-nexus actors targeting…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT29INFRASTRUCTUREunknownCAPABILITYMETA StealerVICTIMunknown
Adversary(1)
Infrastructure
Capability(1)
Victim

Indicators of Compromise

Open the mindmap →

14 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2024-47575HighScore 63/100First seen
CVECVE-2024-8190HighScore 64/100First seen
CVECVE-2025-59718MediumScore 59/100First seen
CVECVE-2023-34132MediumScore 51/100First seen
CVECVE-2026-1281HighScore 63/100First seen
CVECVE-2023-34124MediumScore 51/100First seen
CVECVE-2024-8963HighScore 64/100First seen
CVECVE-2024-24919HighScore 63/100First seen
CVECVE-2023-34133MediumScore 51/100First seen
CVECVE-2026-15409HighScore 78/100First seen
CVECVE-2024-3400HighScore 79/100First seen
CVECVE-2026-24858MediumScore 53/100First seen
CVECVE-2026-1340HighScore 63/100First seen
CVECVE-2023-42793MediumScore 56/100First seen

IOC Relationship Graph

Building graph…