Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
5 IOCs

THREAT ADVISORY DigiCert Compromise (April 2026) May 7, 2026

Blackswan Cybersecurity
Blackswan Cybersecurity
Published May 7, 2026Original Report

Excerpt

DOWNLOAD PDF Background/Summary In early April 2026, DigiCert, a major global Certificate Authority (CA), suffered a targeted social engineering attack against its customer support operations. A threat actor posed as a customer via the support chat channel and delivered a malicious ZIP file disguised as a screenshot. The archive contained a .scr (Windows screensaver) executable embedding a malicious payload. The attack succeeded in compromising two support analyst endpoints…

Read the original report →

Indicators of Compromise

Open the mindmap →

5 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA2561abffe97aafe9916b366da57458a78338598cab9742c2d9e03e4ad0ba11f29bfMediumScore 53/100First seen
SHA256f76c31ecdafb59279833f17f350d9c2b1317da269823097e8dd1736c72449c88MediumScore 53/100First seen
SHA25656b6571ded7d34c7d3adccc46a116f2960d7a2d77a7a4caa70abd23c99602eb7MediumScore 53/100First seen
SHA2563e4229f39f1764b2e504ff2ba116895fb53cd76e23f107b6a47fb0a162422c7cMediumScore 53/100First seen
SHA25602244934046333f45bc22abe6185e6ddda033342836062afb681a583aa7d827fMediumScore 53/100First seen

IOC Relationship Graph

Building graph…