DNS Query To Katz Stealer Domains

SigmaHQ Detections@sigmaHQ

•updated May 26, 2025•0•21

Detects DNS queries to domains associated with Katz Stealer malware. Katz Stealer is a malware variant that is known to be used for stealing sensitive information from compromised systems. In Enterprise environments, DNS queries to these domains may indicate potential malicious activity or compromise.