Seedworm Fakeset C2 Domains
Detects network traffic to known command and control (C2) domains used by the Iranian APT group Seedworm to distribute the Fakeset backdoor. These domains are hosted on the Backblaze cloud storage service.
Sigma

Detects network traffic to known command and control (C2) domains used by the Iranian APT group Seedworm to distribute the Fakeset backdoor. These domains are hosted on the Backblaze cloud storage service.

Already have an account?