Chrysalis Backdoor Network IOCs

Lacey Cochrane@NullVectorX

•updated Feb 2, 2026•4•0•50

Detects network connections to known command and control (C2) infrastructure associated with the Lotus Blossom threat group and the Chrysalis Backdoor. This rule identifies suspicious outbound network activity to specific IP addresses and hostnames linked to this threat actor.