sckit Supply Chain Worm C2/Exfil to skyleen.fr Subdomains

Ibrahim Saud@tektrix

•updated Sep 23, 2026•0•0•14

Detects outbound network traffic from internal hosts to the domain 'skyleen.fr' over TLS/HTTPS, which is characteristic of credential exfiltration associated with the Sckit supply chain worm.