• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    ShinyHunters PeopleSoft Campaign - Network IOC Detection

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Lacey Cochrane@NullVectorX
    •updated Jun 11, 2026•5•0•13

    Detects network connections to known ShinyHunters infrastructure, including specific IP addresses and DNS queries for 'azurenetfiles.net', which has been linked to their operations targeting Oracle PeopleSoft servers via gadget chain exploitation.

    Cortex XDR

    Tags

    T1190 - Exploit Public-Facing ApplicationT1041 - Exfiltration Over C2 ChannelTA0001 - Initial AccessTA0010 - ExfiltrationNetwork ConnectionDNS QueryExploit AttemptNetwork Generic

    Found in

    • ShinyHunters Exploits PeopleSoft Servers in Data TheftLast updated Jun 22, 2026
    • ShinyHunters Exploits PeopleSoft Zero-Day CVE-2026-35273Last updated Jun 22, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?