UNC1069 / AI-themed Social Engineering Activity

Daniel Jeremiah@daniyyell

•updated Feb 23, 2026•6•0•77

Detects possible information stealer activity linked to AI themed lures by flagging suspicious programs launched from Downloads or Temp, connections to Telegram bot endpoints, and Python scripts run from Temp with stealer related keywords in the command line.v