MIMICRAT Malleable C2 Traffic Patterns

Ethan Andrews@eandrews

•updated Feb 20, 2026•11•0•107

Detects outbound HTTPS traffic to specific URI paths and User-Agent strings hardcoded in MIMICRAT's malleable C2 profiles. These profiles impersonate legitimate web analytics traffic.