Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
NSFOCUS Monthly APT Insights – July 2026
Threat Actors
Excerpt
Regional APT Threat Situation In July 2026, the global threat hunting system of the FUYING Lab detected a total of 21 APT attack activities. These activities were primarily concentrated in regions including East Asia, Eastern Europe, Middle East, South Asia, Southeast Asia, and South America as shown in the figure below. Regarding the activity levels of different groups, the most active APT groups were Lazarus from East Asia. Other notably active groups included Kimsuky from…
Read the original report →Diamond Model
Adversary(2)
Infrastructure
Capability
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-66376 | High | Score 66/100 | First seen |
IOC Relationship Graph
Building graph…