Miasma
Also known as Shai-Hulud, Hades
Reports
3
First seen
Jun 8, 2026
Last seen
Jun 9, 2026
Relationships
Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.
Targeting
Sectors
Victim regions
United States ×1
Top ATT&CK techniques
T1195 Supply Chain Compromise ×3T1078 Valid Accounts ×2T1005 Data from Local System ×2T1003 OS Credential Dumping ×2T1566 Phishing ×1T1040 Network Sniffing ×1T1027 Obfuscated Files or Information ×1T1098 Account Manipulation ×1T1190 Exploit Public-Facing Application ×1T1041 Exfiltration Over C2 Channel ×1T1557 On-Path Attack ×1T1555 Credentials from Password Stores ×1
Indicators
cve ×51filename ×3domain ×1
Indicator values are available on Pro and via the API.