Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Threat Intelligence Digest

Weekly digest of the reports and IOCs collected from the monitored sources counted below — active threats, top IOCs, actor activity, and sector targeting.

Weekly Intelligence BriefW43, 2026

585,970

Total IOCs

unique, non-whitelisted

510,308

Verified

confidence ≥ 0.75

526,607

Actionable

confidence ≥ 0.70

191

New Today

last 24 hours

2,948

This Week

last 7 days

1,986

Intel Reports

parsed threat reports

Active Sources

monitored feeds

110

Threat Actors

APT groups tracked

Malware Families

ransomware, RATs, etc.

213

Countries

geographic coverage

Weekly Threat Brief — Week of 2026-10-19

Oct 19 – Oct 25, 2026

Weekly Brief

100

Top IOCs Listed

Threat Actors

Sectors Targeted

Malware Families

Active Threat Actors

Play Sandworm APT10

Targeted Sectors

No sector named in this week's reports

Malware Families

No malware family named in this week's reports

Top High-Confidence IOCs

Live · ≥0.75 confidence

View all →

IOC Value	Type	Confidence	Score	Reports	Last Seen
http://allegrolokalnie.deepre175.cfd/s84nct5	url	High	86	22	Oct 28
https://downloaad.com/review/gvykwwafxh	url	High	86	11	Oct 28
https://allegro.sraczka05456.sbs	url	High	80	7	Oct 28
fea89566c63e80a6dea8d82d6ad6dbb5	md5	High	86	10	Oct 28
http://allegrolokalnie.pll453fds32433sd30d7.shop/oferta/id-8866mlqyx-lenovo-legion-go-amd-ryzen-z1-extreme	url	High	78	6	Oct 28
https://netfix.ayuda-pagar.com/	url	High	70	2	Oct 28
https://ingres0-de-crediec.hstn.me/?i=1	url	High	86	22	Oct 28
https://lafisebancanettcr.vercel.app/	url	High	80	7	Oct 28
http://detectioncenter-case100051351.web.app/	url	High	86	14	Oct 28
https://infocmpte.com/	url	High	86	22	Oct 28
https://bradesco.sistematopaz.digital/	url	High	86	14	Oct 28
https://lagravere.grv462050.pro/	url	High	86	10	Oct 28

Latest Intelligence Reports

Live

PHP2Shell Was Exploited Before the Patch

6 IOC

Sekoia BlogOct 27

Uac 0056 Cyberattack on Ukrainian Authorities Using Graphsteel and Grimplant Malware

12 IOC

ORKL Threat LibraryApr 1

⚡ Weekly Recap: This2shell, That2shell, Everything's an Rce? Rogue Ai, Supply Chain Chaos and More

74 IOC

ORKL Threat LibraryJan 1

Jingle Thief: Inside a Cloud Based Gift Card Fraud Campaign

27 IOC

ORKL Threat LibraryJan 1

North Korea Linked Apt Attack Found Disguised as a Digital Asset Wallet Service Customer Center

3 IOC

ORKL Threat LibraryFeb 21

Cato CTRL™ Threat Research: Uncovering Nytheon AI – A New Platform of Uncensored LLMs

1 IOC

Cato NetworksJun 11

eMudhra, Brotli, and the Long Tail of a Security Fix

1 IOC

Socket SecurityOct 26

CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder

1 IOC

Rapid7Oct 26

Intelligence SummaryIntelligence Summary · Oct 19 – Oct 25, 2026

Weekly Threat Brief — 2026-10-19

Summary: This week, IOC Radar identified 100 new IOCs across 4 threat intelligence reports.

Key Metrics

›New IOCs detected: 100
›New reports processed: 4
›Active threat actors: Play, Sandworm, APT10
›Most targeted sectors: None detected

Notable Threats

›PhishTank (500 entries)
›Abuse.ch URLhaus (5000 entries)
›Abuse.ch ThreatFox (6828 indicators)
›Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)

Recommendations

Security teams should review the high-confidence IOCs identified this week and update their detection rules accordingly.