🐾 - 🚨 Possible connection to Dark Utilities C2aaS

SID: 3300707Rev: 10 views
Sourcepawpatrules
CreatedAugust 5, 2022
UpdatedAugust 5, 2022
Classificationtrojan-activity
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Possible connection to Dark Utilities C2aaS"; flow:to_server, stateless; tls_sni; content:"ipfs.infura.io"; nocase; endswith; reference:url,https://blog.talosintelligence.com/2022/08/dark-utilities.html; metadata:created_at 2022_08_05, updated_at 2022_08_05; sid:3300707; rev:1; classtype:trojan-activity;)

References

urlhttps://blog.talosintelligence.com/2022/08/dark-utilities.html

Metadata

created at2022_08_05
updated at2022_08_05

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!