Potential Operation Triangulation C2 Beaconing Activity - DNS

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•28

Detects potential command and control (C2) beaconing activity to domains identified as being used in the 'Operation Triangulation' attacks, which targeted iOS devices. These domains were revealed by Kaspersky and the FSB.