UNC6240 ShinyHunter PeopleSoft campaign infrastructure contact (IP)
Detects network activity (TCP, DNS, TLS, HTTP) associated with the UNC6240 threat actor's infrastructure, specifically targeting communications with known malicious IP addresses and domains used in a campaign leveraging PeopleSoft-related lures.
Suricata
