Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| LegacyHivecampaign | Related to | CVE-2026-66799cve | — | Correlated cluster | 2026-08-11 |
| Dysphoriacampaign | Related to | CVE-2026-46817cve | — | Correlated cluster | 2026-08-24 |
| PowerShell-based RATcampaign | Related to | CVE-2026-82078cve | — | Correlated cluster | 2026-08-31 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-65791cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-68820campaign | Related to | CVE-2026-62823cve | — | Correlated cluster | 2026-08-11 |
| BadIIScampaign | Related to | CVE-2026-45501cve | — | Correlated cluster | 2026-08-26 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-66804cve | — | Correlated cluster | 2026-08-17 |
| BadIIScampaign | Related to | CVE-2026-43284cve | — | Correlated cluster | 2026-08-26 |
| LegacyHivecampaign | Related to | CVE-2026-62888cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-56162cve | — | Correlated cluster | 2026-08-11 |
| SPECTREcampaign | Related to | CVE-2022-27925cve | — | Correlated cluster | 2026-08-20 |
| CVE-2026-81963campaign | Related to | CVE-2026-72957cve | — | Correlated cluster | 2026-09-08 |
| LegacyHivecampaign | Related to | CVE-2026-65657cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-69890cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-59310cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-58644cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-85880campaign | Related to | CVE-2026-67631cve | — | Correlated cluster | 2026-09-09 |
| payload · Amateracampaign | Related to | CVE-2026-48710cve | — | Correlated cluster | 2026-09-24 |
| CVE-2026-85880campaign | Related to | CVE-2026-69498cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2023-32233cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-59118cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-69459cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-0770cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2026-48907cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-85880campaign | Related to | CVE-2026-71340cve | — | Correlated cluster | 2026-09-09 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-68816cve | — | Correlated cluster | 2026-08-17 |
| payload · Amateracampaign | Related to | CVE-2026-76451cve | — | Correlated cluster | 2026-09-24 |
| CVE-2026-85880campaign | Related to | CVE-2026-69714cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-85880campaign | Related to | CVE-2026-69911cve | — | Correlated cluster | 2026-09-09 |
| msgbox.execampaign | Related to | CVE-2026-81963cve | — | Correlated cluster | 2026-09-21 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2026-1731cve | — | Correlated cluster | 2026-08-26 |
| payload · Amateracampaign | Related to | CVE-2025-68700cve | — | Correlated cluster | 2026-09-24 |
| CVE-2026-85880campaign | Related to | CVE-2026-69285cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-68820campaign | Related to | CVE-2026-70130cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-66799cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2020-0796cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-60004cve | — | Correlated cluster | 2026-09-16 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-65400cve | — | Correlated cluster | 2026-08-17 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2025-53770cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-81963campaign | Related to | CVE-2026-69406cve | — | Correlated cluster | 2026-09-08 |
| Dysphoriacampaign | Related to | CVE-2026-15409cve | — | Correlated cluster | 2026-08-24 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2023-36884cve | — | Correlated cluster | 2026-08-26 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2021-3156cve | — | Correlated cluster | 2026-09-16 |
| LegacyHivecampaign | Related to | CVE-2026-62783cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2020-5902cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2025-49113cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-69541cve | — | Correlated cluster | 2026-09-08 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-65789cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-85880campaign | Related to | CVE-2026-73023cve | — | Correlated cluster | 2026-09-09 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-63513cve | — | Correlated cluster | 2026-08-17 |