All Detections

macOS RAT com.apple.act.mond C2 Beacon

Effy Elden@ineffyble
updated Mar 31, 20261164

Detects the macOS RAT com.apple.act.mond beaconing via HTTP POST with spoofed IE8 User-Agent which was spread via axios supply-chain attack

Sigma