AdFection chain: Discover-Tech NOAS, Candiru validator, exploit and C&C
Detects the AdFection multi-stage infection chain where a device sequentially contacts advertising infrastructure, Candiru validator servers, exploit servers, and Candiru Command and Control domains within a short time window.
Microsoft Sentinel (KQL)
