Axios Supply Chain Attack

Bhojraj Joshi@cybrbhojrajjoshi

•updated Apr 20, 2026•3•0•294

This rule detects suspicious activity related to a specific IP address (142.11.206.73) in network connections, or a specific domain (sfrclak.com) in DNS requests or process command lines. This could indicate communication with known malicious infrastructure or the execution of malware.