Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE
Threat Actors
Malware Families
Excerpt
The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Threat Research Malware Malware The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE 11 min read Related Products Cortex Cortex Cloud Cortex XDR Cortex XSIAM Unit 42 Incident Response By: Eviatar Garzi Published: September 10, 2026 Categories: Malware Threat Research Tags: API Cryptographic…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 7e1e73513947053f6ee40746fc498b1fb4f285cf175fa8336f08a38e209bda38 | Medium | Score 53/100 | First seen |
| SHA256 | 40228af4d9a094f0fef2d7a303a3b6a689c4b4eba2fa9f7da5125b81d2d68ec8 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…