Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

The Good, the Bad and the Ugly in Cybersecurity – Week 23

SentinelOne Blog
SentinelOne Blog
Published June 5, 2026Original Report

Threat Actors

Malware Families

Excerpt

The Good | Fraud Networks Disrupted, Crypto Exchanges Sanctioned & Doxer Arrested This week, the DoJ’s Scam Center Strike Force unveiled results from “Disruption Week,” a first-of-its-kind joint initiative between U.S. agencies and private industry targeting cyber-enabled cryptocurrency investment fraud . Federal investigators from the FBI, Secret Service, and HSI shared threat intelligence with major technology firms including Apple, Google, and Meta…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYRoyalTA4922INFRASTRUCTUREunknownCAPABILITYMETA StealerRoyalVICTIMunknown
Adversary(2)
Infrastructure
Capability(2)
Victim

Attack Flow7 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1566
1/7
Phishing
ActionLaunch phishing campaigns
TA4922 launches credential phishing campaigns using lures related to human resources, corporate taxation, and invoices.

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-0257HighScore 81/100First seen

IOC Relationship Graph

Building graph…