Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
6 IOCs

PHP2Shell Was Exploited Before the Patch

Sekoia Blog
Sekoia Blog
Published October 27, 2026Original Report

Malware Families

Excerpt

PHP2Shell Was Exploited Before the Patch Take a tour GET A demo Solutions Platform Partners Company Resources en fr Take a tour GET A demo en fr Solutions Tailored cybersecurity built for your specific challenges and industry By Use Case Sekoia Self-hosted SIEM replacement Stack integration Continuous threat detection Automated incident response Alert fatigue relief By Vertical Healthcare Technology Energy & Utilities Government Manufacturing MSSP Platform Give your…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYMiraiWannaCryVICTIMunknown
Adversary
Infrastructure
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

6 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-111497HighScore 82/100First seen
CVECVE-2021-44228HighScore 80/100First seen
CVECVE-2026-109618HighScore 84/100First seen
CVECVE-2023-4966MediumScore 42/100First seen
CVECVE-2023-34362HighScore 79/100First seen
CVECVE-2026-109619HighScore 84/100First seen

IOC Relationship Graph

Building graph…