Suspicious IPFS Communication with Email Pattern

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•1•0•29

Detects network connections to the InterPlanetary File System (IPFS) where the URI contains a pattern indicative of an email address. This behavior is associated with recent phishing campaigns that leverage IPFS to host credential harvesting webpages, attempting to collect user credentials.