Katz Stealer Suspicious User-Agent

SigmaHQ Detections@sigmaHQ

•updated May 26, 2025•1•0•33

Detects network connections with a suspicious user-agent string containing "katz-ontop", which may indicate Katz Stealer activity. This specific user-agent string is likely hardcoded or characteristic of the malware's C2 communication.