SilkParasite Redis Botnet IOC Hunt: IPs, Domains, Hashes, C2 Token

Arnold Chan@slaz

•updated Sep 20, 2026•0•0•6

This rule detects network connections to known cryptomining pool IP addresses and domain names, as well as file or process executions matching specific hashes associated with known miner samples. It monitors for communication to command-and-control (C2) servers potentially used for cryptomining operations.