Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Securing the Software Supply Chain: How SentinelOne’s AI EDR Autonomously Blocked the CPU-Z Watering Hole Cyber Attack
Excerpt
On April 9, 2026, cpuid.com was actively serving malware through its own official download button. Threat actors had compromised the CPUID domain at the API level and were silently redirecting legitimate download requests to attacker-controlled infrastructure. The attack ran for approximately 6 hours. Users who navigated directly to the official site received a legitimate, properly signed binary with a malicious payload bundled inside it. That morning, SentinelOne’s…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Attack Flow8 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | supp0v3.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…