Mirage Active Phishing Campaign: Domains, C2 IPs & URL Kit Patterns

Ankit Mehta@Secvyn

•updated Sep 5, 2026•7•0•5

Detects inbound emails associated with the Mirage phishing campaign. The detection monitors for known malicious domains in sender information and URL links, as well as specific command-and-control (C2) IP addresses and URL patterns.