Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
SmartApeSG Launches Okendo Reviews Supply Chain Attack
Malware Families
Excerpt
IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered malicious JavaScript code embedded in a legitimate reviews widget found on numerous websites. Our analysis revealed that the affected component was the Okendo Reviews widget, a popular customer review platform used by more than 18,000 brands. Because the Okendo Reviews widget is widely…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://api.wizzleticks.com/claims/scope-schema.php?4ManBBdA | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…