UNC1549 fake Teledyne FLIR careers portal access (teledyneflir.com.de)

Ibrahim Saud@tektrix

•updated Jul 2, 2026•0•0•2

This rule detects DNS queries for the domain 'teledyneflir.com.de', which is known to be used by the threat actor UNC1549 as a fake recruitment portal to conduct phishing campaigns impersonating the Teledyne FLIR careers site.