Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
9 IOCs
September 2026: FBI Breach, Clop Hijack & IDScan Leak
Mentioned in this report
Excerpt
The major cyber attacks of September 2026 hit federal law enforcement, a rival cybercrime gang, and the companies that verify identities. ShinyHunters hijacked the Clop ransomware gang’s Dark Web leak site and, four days later, claimed a breach of the Federal Bureau of Investigation (FBI). Identity data drove the month’s biggest numbers, led by a data breach linked to a Dark Web service advertising more than 153 million driver’s license scans. AI agents also moved from…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →9 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-85046 | High | Score 79/100 | First seen |
| CVE | CVE-2026-88772 | High | Score 81/100 | First seen |
| CVE | CVE-2026-88771 | High | Score 81/100 | First seen |
| CVE | CVE-2026-81578 | High | Score 72/100 | First seen |
| CVE | CVE-2026-35273 | High | Score 80/100 | First seen |
| CVE | CVE-2026-85880 | High | Score 79/100 | First seen |
| CVE | CVE-2026-82078 | High | Score 72/100 | First seen |
| CVE | CVE-2026-42608 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-87491 | High | Score 74/100 | First seen |
IOC Relationship Graph
Building graph…