Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

The Good, the Bad and the Ugly in Cybersecurity – Week 26

SentinelOne Blog
SentinelOne Blog
Published June 26, 2026Original Report

Threat Actors

Malware Families

Excerpt

The Good | Authorities Dismantle Malware Networks and Seize Cambodian Scam Infrastructure Following the seizure of a major Phishing-as-a-Service last week , the latest move, part of Operation Endgame, dismantled operational infrastructure supporting the Amadey and StealC malware families . The joint effort by Europol and private sector partners successfully took 326 servers and 142 malicious domains offline. Investigators recovered approximately 27 million stolen credentials…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYScattered SpiderINFRASTRUCTUREunknownCAPABILITYSocGholishStealcVICTIMunknown
Adversary(1)
Infrastructure
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-20230MediumScore 58/100First seen
CVECVE-2026-20245HighScore 78/100First seen

IOC Relationship Graph

Building graph…