Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
5 IOCs
THREAT ADVISORY DigiCert Compromise (April 2026) May 7, 2026
Excerpt
DOWNLOAD PDF Background/Summary In early April 2026, DigiCert, a major global Certificate Authority (CA), suffered a targeted social engineering attack against its customer support operations. A threat actor posed as a customer via the support chat channel and delivered a malicious ZIP file disguised as a screenshot. The archive contained a .scr (Windows screensaver) executable embedding a malicious payload. The attack succeeded in compromising two support analyst endpoints…
Read the original report →Indicators of Compromise
Open the mindmap →5 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 1abffe97aafe9916b366da57458a78338598cab9742c2d9e03e4ad0ba11f29bf | Medium | Score 53/100 | First seen |
| SHA256 | f76c31ecdafb59279833f17f350d9c2b1317da269823097e8dd1736c72449c88 | Medium | Score 53/100 | First seen |
| SHA256 | 56b6571ded7d34c7d3adccc46a116f2960d7a2d77a7a4caa70abd23c99602eb7 | Medium | Score 53/100 | First seen |
| SHA256 | 3e4229f39f1764b2e504ff2ba116895fb53cd76e23f107b6a47fb0a162422c7c | Medium | Score 53/100 | First seen |
| SHA256 | 02244934046333f45bc22abe6185e6ddda033342836062afb681a583aa7d827f | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…