RoguePlanet Named Pipe Creation - CVE-2026-50656 Exploit Orchestration

Ibrahim Saud@tektrix

•updated Jun 30, 2026•6•0•8

This rule detects the execution of processes named 'RoguePlanet.exe' and monitors for inter-process communication using named pipes with the same name. This pattern is indicative of a specific malware payload attempting to establish communication channels for C2 or process interaction.