Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

IT threat evolution in Q1 2026. Non-mobile statistics

Securelist
Securelist
Published May 18, 2026Original Report

Threat Actors

Malware Families

Excerpt

IT threat evolution in Q1 2026. Non-mobile statistics IT threat evolution in Q1 2026. Mobile statistics The statistics in this report are based on detection verdicts returned by Kaspersky products unless otherwise stated. The information was provided by Kaspersky users who consented to sharing statistical data. Quarterly figures In Q1 2026: Kaspersky products blocked more than 343 million attacks that originated with various online resources. Web Anti-Virus responded to 50…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAkiraBlackCatLockBitINFRASTRUCTUREunknownCAPABILITYAkiraBlackCatCl0pVICTIMunknown
Adversary(3)
Infrastructure
Capability(7)
Victim

Attack Flow7 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1190
1/7
Exploit Public-Facing Application
ActionExploit firewall vulnerability
The Interlock group exploited a zero-day vulnerability (CVE-2026-20131) in Cisco Secure FMC firewall management software for initial access.

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-20131HighScore 60/100First seen

IOC Relationship Graph

Building graph…