Overview
Indicators of compromise associated with SNOWLIGHT. 3 indicators listed below.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| url | http://103.30.76.214:8779/?h=103.30.76.214&p=8779&t=ws&a=l64&stage=true | September 9, 2026 | 85% |
| url | http://103.30.76.214:8779/?h=103.30.76.214&p=8779&t=tcp&a=l64&stage=true | September 9, 2026 | 85% |
| url | http://103.30.76.206:443/?h=103.30.76.206&p=443&t=tcp&a=l64&stage=true | September 9, 2026 | 85% |
Related content