alert dns any any -> any any (msg:"🐾 - ☠ DNS request 🌐 --> 🎛 C2 🐀 Revenge RAT"; flow:to_server, stateless; dns_query; content:"lalik.linkpc.net"; nocase; reference:url,https://twitter.com/ScumBots/status/1286987642073239553; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.revenge_rat; metadata:created_at 2020_07_29, updated_at 2020_07_29; sid:3312748; rev:1; classtype:trojan-activity;)