CSAIS
IDEN
HighEarly warningMalwareChina · English

CVE-2026-102764: Critical BeyondTrust Remote Support Zero-Day Exploited by China-Linked Hackers

First seen 16 Oct, 07:41 WIBLatest 16 Oct3 articles · 3 publishers
Verify evidence
59
Confidence index · preliminarycomputed by the pipeline (V0.7)medium
Corroborated by distinct domains
Independent sources
Victim identified
Full text available
Clustering consistency
Status and preventive steps
Early warningMachine output from news coverage; not verified by the public or institutions
Preventive steps
  • Turn on two-step verification for email, banking, and social media.
  • Install apps only from official stores and never open APK files sent over chat.
  • Keep the operating system and apps updated and leave built-in protection on.
Literacy audienceSocial media and messaging usersHomemakersFinance and economics office staff
Literacy topics
  1. The danger of APK files and unofficial apps
  2. System updates and security patches
  3. Spotting fake emails, texts, and links

Report toAduan Konten KomdigiPatroli Siber Polri

Extracted claims

Victimnot found
not identified
Actornot found
not identified
Attack typeconfidence 0.90
Ransomware3 differing values across articles; review needed.
Event datenot found
not identified
LocationChina
Target groupIndividuals
Status
  • D1 Machinemedium trust
Conclusion
  • D1 MachineNot yet certain

Source chronology

3 articles, by publication time

16 October 20263 articles

  1. 07:41 WIBFirst reportfull text hashed
    CVE-2026-102764: BeyondTrust Zero-Day Exploited in Attackscyberkendra.com
  2. 21:21 WIB+14 hfull text hashed
    CVE-2026-102764: BeyondTrust Zero-Day Exploitedsocradar.io
  3. 22:17 WIB+15 hfull text hashed
    CVE-2026-102764: Critical BeyondTrust Remote Support Zero-Day Exploited by China-Linked Hackerssocprime.com
Relations between articles
3 pairs likely independent

Evidence

Hashes prepared3full text hashed 3
first evidence_uidddcc05961103d8b58081a43a
3 of 3 evidence records are in Merkle batches

Flow comparison D1–D4

each flow's preventive output; this is where they differ · D1 changed 1 times · since 17 Oct
D1Machine17 OctD2Public surveynone yetHelp reviewD3Institutionnone yetD4Official recordnone yet
Literacy audienceSocial media and messaging usersHomemakersFinance and economics office staff–––
Literacy topics
  1. 1.The danger of APK files and unofficial apps
  2. 2.System updates and security patches
  3. 3.Spotting fake emails, texts, and links
–––
Preventive steps
  • Turn on two-step verification for email, banking, and social media.
  • Install apps only from official stores and never open APK files sent over chat.
  • Keep the operating system and apps updated and leave built-in protection on.
Report to Aduan Konten Komdigi, Patroli Siber Polri
–––
Institution's reason––––

Columns D2 to D4 fill in once the public survey and institution statements are running.Summary across incidents