Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2008-4128cve | — | Correlated cluster | 2026-09-16 |
| BadIIScampaign | Related to | CVE-2017-0199cve | — | Correlated cluster | 2026-08-26 |
| PowerShell-based RATcampaign | Related to | CVE-2026-18885cve | — | Correlated cluster | 2026-08-31 |
| CVE-2026-85880campaign | Related to | CVE-2026-69466cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-85880campaign | Related to | CVE-2026-81953cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-81963campaign | Related to | CVE-2026-78445cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-83548campaign | Related to | CVE-2026-82329cve | — | Correlated cluster | 2026-09-07 |
| CVE-2026-85880campaign | Related to | CVE-2026-69385cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-81963campaign | Related to | CVE-2026-69714cve | — | Correlated cluster | 2026-09-08 |
| Dysphoriacampaign | Related to | CVE-2026-45659cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-68820campaign | Related to | CVE-2026-70130cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-80083cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-81963campaign | Related to | CVE-2026-70178cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2019-1068cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-65788cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-77505cve | — | Correlated cluster | 2026-09-09 |
| payload · XMRigcampaign | Related to | CVE-2026-49869cve | — | Correlated cluster | 2026-09-03 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-48939cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-77898cve | — | Correlated cluster | 2026-09-08 |
| Dysphoriacampaign | Related to | CVE-2026-15410cve | — | Correlated cluster | 2026-08-24 |
| JSCealcampaign | Related to | CVE-2025-60719cve | — | Correlated cluster | 2026-09-02 |
| CVE-2026-85880campaign | Related to | CVE-2026-70178cve | — | Correlated cluster | 2026-09-09 |
| Dysphoriacampaign | Related to | CVE-2013-3307cve | — | Correlated cluster | 2026-08-24 |
| LegacyHivecampaign | Related to | CVE-2026-56161cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2023-32233cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-68820campaign | Related to | CVE-2026-62896cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-63508cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-77493cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-25089cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2026-0770cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-81963campaign | Related to | CVE-2026-69623cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-81963campaign | Related to | CVE-2026-69845cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-85880campaign | Related to | CVE-2026-72959cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-68820campaign | Related to | CVE-2026-62869cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-78520cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-81963campaign | Related to | CVE-2026-72954cve | — | Correlated cluster | 2026-09-08 |
| Cavern Manticore · Caverncampaign | Related to | CVE-2026-20217cve | — | Correlated cluster | 2026-07-08 |
| BadIIScampaign | Related to | CVE-2026-46300cve | — | Correlated cluster | 2026-08-26 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-15409cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-72979cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-48282cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-62890cve | — | Correlated cluster | 2026-08-11 |
| LegacyHivecampaign | Related to | CVE-2026-65789cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-66376cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2026-45501cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-85880campaign | Related to | CVE-2026-55007cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-12569cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-71331cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-69391cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-85880campaign | Related to | CVE-2026-69451cve | — | Correlated cluster | 2026-09-09 |