Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
10 IOCs
Sekoia Honeypot Captures an Attack on GenAI Infrastructure
Threat Actors
Malware Families
Excerpt
Sekoia Honeypot Captures an Attack on GenAI Infrastructure Take a tour GET A demo Solutions Platform Partners Company Resources en fr Take a tour GET A demo en fr Solutions Tailored cybersecurity built for your specific challenges and industry By Use Case SIEM replacement Stack integration Continuous threat detection Automated incident response Alert fatigue relief By Vertical Healthcare Technology Energy & Utilities Government Manufacturing MSSP Platform Give your…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(5)
Victim
Indicators of Compromise
Open the mindmap →10 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | 98br.game | High | Score 58/100 | First seen |
| CVE | CVE-2024-31621 | Medium | Score 51/100 | First seen |
| CVE | CVE-2025-59528 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-41264 | Medium | Score 51/100 | First seen |
| CVE | CVE-2022-24934 | Medium | Score 51/100 | First seen |
| IP | 154.217.251.226 | High | Score 58/100 | First seen |
| URL | http://154.217.251.226:19999/flowise-hb | High | Score 58/100 | First seen |
| Domain | 98br.org | High | Score 58/100 | First seen |
| Domain | gr99.top | High | Score 58/100 | First seen |
| Domain | 11kk.co | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…