avatar

Ilyess Sellami

@ilyessellami
1 follower33 downloads43 copies0 likes1,928 views

3 detections

Detects suspicious behavior associated with an Adobe Reader zero-day exploit, including specific network connections, suspicious user-agent strings, registry persistence, and specific image loads (e.g., ntdll.dll or bootsvc.dll).
avatar
Ilyess Sellami@ilyessellami
avatar
SigmaHero
7 months ago
220654
Detects the execution of malicious artifacts associated with the Sapphire Sleet (UNC1069) Axios npm supply chain attack, including the initial plain-crypto-js setup, specific curl commands posting to C2, and OS-specific second-stage payload executions.
avatar
Ilyess Sellami@ilyessellami
avatar
Detections.ai Community
7 months ago
901,005
Detects the execution of malicious artifacts associated with the Sapphire Sleet (UNC1069) Axios npm supply chain attack, including the initial plain-crypto-js setup, specific curl commands posting to C2, and OS-specific second-stage payload executions.
avatar
Ilyess Sellami@ilyessellami
avatar
SigmaHero
7 months ago
120269