Crimson Kingsnake – Typosquat Domain Communication

Ankit Mehta@Secvyn

•updated Jun 30, 2026•2•0•3

This rule detects network connections to a list of domains identified as associated with phishing activities associated with Crimson Kingsnake. Monitoring these connections can help identify compromised systems or users attempting to access malicious sites.