ShinyHunters CVE-2026-35273 IOC Hunt - IPs, Domains, URLs, Hashes

Subash Ghimire@iamsubashg

•updated Jun 22, 2026•6•0•20

This rule detects suspicious activity based on a set of Indicators of Compromise (IOCs) including malicious IP addresses, domains, URLs, and file hashes (SHA256). It monitors network connection events for communication with known malicious IPs, domains, or URLs, and file/process events for the execution or presence of files with known malicious SHA256 hashes.