Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
7 IOCs

SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors

Step Security
Step Security
Published October 5, 2026Original Report

Threat Actors

Malware Families

Excerpt

SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors - StepSecurity Skip to main content Platform Platform Overview Dev Machine Guard Code Repo Security Secure Registry CI/CD Security Threat Intel Customers Pricing Resources Blog Product Tour Dev Machine Guard on GitHub Harden Runner on GitHub GitHub Actions Audit Documentation Company About Us Newsroom Trust Center Request a Demo Login Platform Platform Overview Dev Machine Guard Code Repo Security Secure…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayINFRASTRUCTUREunknownCAPABILITYCobalt StrikeMETA StealerPlayVICTIMunknown
Adversary(1)
Infrastructure
Capability(3)
Victim

Indicators of Compromise

Open the mindmap →

7 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA1bbbca2ddaa5d8feaa63e36b76fdaad77386f024fMediumScore 53/100First seen
SHA256031267ee37c5a84c25cb0542cbfeb49f30d5604305b0bdccdeafbedcbbe6849bMediumScore 53/100First seen
SHA134128fd8cdc95a1dfddb52f99ceeec362aadd711MediumScore 53/100First seen
SHA1de0fac2e4500dabe0009e67214ff5f5447ce83ddMediumScore 53/100First seen
SHA256f0c8b0cde86b98a2869a22fd43ffcf61f1dcca252729e2be291e590e3dc5f49aMediumScore 53/100First seen
SHA2567b2807bfb5bfec2383b46ba8226f47edb330ae6b32178eab61e377f3c3486c47MediumScore 53/100First seen
SHA151e2a2c985c3c869510a36e8c37a3b3557af4a3cMediumScore 53/100First seen

IOC Relationship Graph

Building graph…