• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    ShinyHunters PeopleSoft Campaign - Network IOC Detection

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    nomit vyas@xoxo
    •updated Jun 24, 2026•0•0•3

    Detects network connections to known ShinyHunters infrastructure, identified by specific IP addresses and DNS queries for 'azurenetfiles.net'. This activity is associated with the exploitation of Oracle PeopleSoft servers via gadget chain exploitation.

    Cortex XDR

    Tags

    T1190 - Exploit Public-Facing ApplicationT1041 - Exfiltration Over C2 ChannelTA0001 - Initial AccessTA0010 - ExfiltrationNetwork ConnectionDNS QueryExploit AttemptNetwork Generic

    Found in

    • ShinyHunters Exploits PeopleSoft Servers in Data TheftLast updated Jun 22, 2026
    • ShinyHunters Exploits PeopleSoft Zero-Day CVE-2026-35273Last updated Jun 22, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?