Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| LegacyHivecampaign | Related to | CVE-2026-62766cve | — | Correlated cluster | 2026-08-11 |
| BadIIScampaign | Related to | CVE-2021-29441cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-85880campaign | Related to | CVE-2026-78454cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-81963campaign | Related to | CVE-2026-69832cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2024-12356cve | — | Correlated cluster | 2026-09-16 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62873cve | — | Correlated cluster | 2026-08-17 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-1969cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2018-11511cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-81963campaign | Related to | CVE-2026-69676cve | — | Correlated cluster | 2026-09-08 |
| Dysphoriacampaign | Related to | CVE-2026-34486cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-85880campaign | Related to | CVE-2026-69832cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-81963campaign | Related to | CVE-2026-73009cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-81963campaign | Related to | CVE-2026-81953cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-42530cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2026-48939cve | — | Correlated cluster | 2026-08-24 |
| BadIIScampaign | Related to | CVE-2015-5287cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-85880campaign | Related to | CVE-2026-70562cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-24472cve | — | Correlated cluster | 2026-09-16 |
| msgbox.execampaign | Related to | CVE-2026-87491cve | — | Correlated cluster | 2026-09-21 |
| CVE-2026-81963campaign | Related to | CVE-2026-69305cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-68820campaign | Related to | CVE-2026-63513cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-66384cve | — | Correlated cluster | 2026-09-16 |
| BadIIScampaign | Related to | CVE-2025-8088cve | — | Correlated cluster | 2026-08-26 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-34486cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-0300cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2026-41948cve | — | Correlated cluster | 2026-08-26 |
| LegacyHivecampaign | Related to | CVE-2026-68804cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-70562cve | — | Correlated cluster | 2026-09-08 |
| FudModulecampaign | Related to | CVE-2025-49113cve | — | Correlated cluster | 2026-09-03 |
| CVE-2026-68820campaign | Related to | CVE-2026-64903cve | — | Correlated cluster | 2026-08-11 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62827cve | — | Correlated cluster | 2026-08-17 |
| UNC1549 / TA455 · NightLedgercampaign | Related to | CVE-2026-66314cve | — | Correlated cluster | 2026-08-12 |
| payload · XMRigcampaign | Related to | CVE-2025-68700cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-68820campaign | Related to | CVE-2026-61925cve | — | Correlated cluster | 2026-08-11 |
| Astarothcampaign | Related to | CVE-2026-6875cve | — | Correlated cluster | 2026-08-18 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-6875cve | — | Correlated cluster | 2026-09-16 |
| BadIIScampaign | Related to | CVE-2010-3904cve | — | Correlated cluster | 2026-08-26 |
| payload · XMRigcampaign | Related to | CVE-2025-69286cve | — | Correlated cluster | 2026-08-26 |
| BadIIScampaign | Related to | CVE-2021-29442cve | — | Correlated cluster | 2026-08-26 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-49163cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-85880campaign | Related to | CVE-2026-69601cve | — | Correlated cluster | 2026-09-09 |
| Dysphoriacampaign | Related to | CVE-2026-31843cve | — | Correlated cluster | 2026-08-24 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2020-1013cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-69740cve | — | Correlated cluster | 2026-09-08 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-53413cve | — | Correlated cluster | 2026-08-17 |
| Dysphoriacampaign | Related to | CVE-2018-0802cve | — | Correlated cluster | 2026-08-24 |
| LegacyHivecampaign | Related to | CVE-2026-62893cve | — | Correlated cluster | 2026-08-11 |
| LegacyHivecampaign | Related to | CVE-2026-68820cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2017-7921cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-62721cve | — | Correlated cluster | 2026-08-11 |