Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
https://www.lumen.com/blog/en-us/expanded-jdy-iot-and-soho-botnet-enables-rapid-vulnerability-exploitation JDY Botnet: How IoT and SOHO Devices Are Exploited By By Black Lotus Labs Archived: 2026-10-10 02:01:27 UTC Expanded JDY IoT and SOHO botnet enables rapid vulnerability exploitation Published on Jun 10, 2026 | 11 minute read Black Lotus Labs® recently identified a significant resurgence of the JDY botnet, a covert reconnaissance network tied to China-nexus threat…
Read the original report →Diamond Model
Adversary(2)
Infrastructure(2)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 0000000000000000bdb718bdf47cbcde | High | Score 67/100 | First seen |
| IP | 1.8.3.9 | High | Score 67/100 | First seen |
| IP | 149.248.3.38 | High | Score 86/100 | First seen |
IOC Relationship Graph
Building graph…