Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-02-06
Excerpt
Overview During the week of January 31 - February 7, 2026, GreyNoise sensors observed 3,979 HTTP sessions from 245 unique IP addresses containing callbacks to Interactsh OAST (Out-of-band Application Security Testing) domains. The activity generated 3,707 unique OAST domains spanning 82 distinct campaign identifiers, indicating numerous independent scanning operations rather than coordinated infrastructure. Analysis employed JA4T+JA4H fingerprint clustering, OAST domain…
Read the original report →Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2018-10561 | High | Score 59/100 | First seen |
| CVE | CVE-2021-44228 | High | Score 80/100 | First seen |
| CVE | CVE-2023-47246 | High | Score 59/100 | First seen |
| CVE | CVE-2025-55182 | High | Score 82/100 | First seen |
| CVE | CVE-2024-12987 | Medium | Score 51/100 | First seen |
| CVE | CVE-2022-26134 | High | Score 82/100 | First seen |
IOC Relationship Graph
Building graph…