TeamPCP C2 Domain Activity Detected

Danny Y@zendannyy

•updated Mar 25, 2026•3•0•120

This rule detects network communication (DNS queries, HTTP requests, or network connections) to the command and control (C2) domain 'checkmarx.zone', which is associated with the TeamPCP threat group. This activity indicates potential compromise or communication with adversary infrastructure.