Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| Dysphoriacampaign | Related to | CVE-2021-32305cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-68820campaign | Related to | CVE-2026-58650cve | — | Correlated cluster | 2026-08-11 |
| BadIIScampaign | Related to | CVE-2026-45386cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-85880campaign | Related to | CVE-2026-69460cve | — | Correlated cluster | 2026-09-09 |
| Rhysida · Qilincampaign | Related to | CVE-2026-76019cve | — | Correlated cluster | 2026-09-22 |
| CVE-2026-85880campaign | Related to | CVE-2026-69274cve | — | Correlated cluster | 2026-09-09 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-65668cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-85880campaign | Related to | CVE-2026-69710cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2019-16098cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2026-16723cve | — | Correlated cluster | 2026-08-24 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-12352cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-62822cve | — | Correlated cluster | 2026-08-11 |
| AnyDeskcampaign | Related to | CVE-2019-0708cve | — | Correlated cluster | 2026-09-17 |
| CVE-2026-85880campaign | Related to | CVE-2026-78445cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-62593cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-31324cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2026-19489cve | — | Correlated cluster | 2026-08-24 |
| PowerShell-based RATcampaign | Related to | CVE-2026-81578cve | — | Correlated cluster | 2026-08-31 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-65617cve | — | Correlated cluster | 2026-09-16 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62820cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-81963campaign | Related to | CVE-2026-69460cve | — | Correlated cluster | 2026-09-08 |
| LegacyHivecampaign | Related to | CVE-2026-68794cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-69829cve | — | Correlated cluster | 2026-09-09 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62815cve | — | Correlated cluster | 2026-08-17 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2021-24139cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-69725cve | — | Correlated cluster | 2026-09-08 |
| BadIIScampaign | Related to | CVE-2021-23758cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-85880campaign | Related to | CVE-2026-81352cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2022-22947cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-24858cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-48908cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2017-7269cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-81951cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-0740cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2025-7852cve | — | Correlated cluster | 2026-08-24 |
| payload · XMRigcampaign | Related to | CVE-2026-45312cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-68820campaign | Related to | CVE-2026-63526cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-62815cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-69857cve | — | Correlated cluster | 2026-09-09 |
| payload · Amateracampaign | Related to | CVE-2026-49869cve | — | Correlated cluster | 2026-09-23 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2026-45386cve | — | Correlated cluster | 2026-08-26 |
| BadIIScampaign | Related to | CVE-2023-46604cve | — | Correlated cluster | 2026-08-26 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2022-1388cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2026-19490cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-81963campaign | Related to | CVE-2026-77505cve | — | Correlated cluster | 2026-09-08 |
| BadIIScampaign | Related to | CVE-2023-36884cve | — | Correlated cluster | 2026-08-26 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-48907cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2021-3156cve | — | Correlated cluster | 2026-08-24 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62869cve | — | Correlated cluster | 2026-08-17 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-59115cve | — | Correlated cluster | 2026-08-17 |