Sliver - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/sliver/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 13:40:08 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSliver C2 infrastructure discoveryhttps://feed.craftedsignal.io/briefs/2026-11-sliver-c2/Thu, 05 Nov 2026 13:40:08 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-sliver-c2/A new Sliver command-and-control server has been identified at 93.152.221.150:31337, facilitating potential post-exploitation beaconing.A new Sliver command-and-control (C2) server has been identified at 93.152.221.150 on port 31337. Sliver is a cross-platform adversary emulation and penetration testing framework commonly leveraged by threat actors for beaconing, lateral movement, and modular payload deployment.

Impact

Presence of this indicator suggests active C2 infrastructure capable of executing post-exploitation tasks, maintaining persistence, and facilitating data exfiltration within compromised environments.

Recommendation

  • Block inbound and outbound traffic to 93.152.221.150:31337 at the network perimeter.
  • Review historical logs for connections to this IP address to identify potential prior compromise.
]]>mediumadvisorysliverc2malwarenetwork-threat