Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Malware Families
Excerpt
Glassworm Hacks OVH Clouds CLI tool | OpenSourceMalware BLOG Glassworm Hacks OVH Clouds CLI tool On 2026-10-19, the official OVHcloud CLI tool was compromised by the Glassworm threat actors who published five malicious versions to GitHub and Brew By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 · 2026-10-19T22:18:58.233Z OVHcloud CLI supply chain compromise: release assets replaced through a GlassWorm-hijacked contributor account Oct 20, 2026 · @6mile Summary On 19 October 2026,…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 5c2beb56e6d83a4b426565a1557791ef759316abcc4effb38dd627c90aeb80e0 | High | Score 56/100 | First seen |
| SHA256 | 0f79989912572a24ba13baabb32b3fd084496271c51448d47b66fe1aedbf293c | High | Score 56/100 | First seen |
| SHA256 | 43df42fd79f6f81e530892b54634598770d6e496796a863c596e616bcb3fec70 | High | Score 56/100 | First seen |
| SHA1 | 5ead8ef9b43d354dfb5caadff803b11afc8c5c58 | High | Score 56/100 | First seen |
| MD5 | a041fdaa0521fb5c3e26b217aaf24115 | High | Score 56/100 | First seen |
| SHA256 | 3833daffcaaaab27e4e0e0833240ffcb1df8df648f4ec0bc4a75c176e28933cb | High | Score 56/100 | First seen |
IOC Relationship Graph
Building graph…