DinDoor/CastleLoader C2 Domain DNS Request

Thiru N@Iamthiru

•updated Apr 22, 2026•4•0•359

Detects DNS requests to the known DinDoor and CastleLoader C2 domain serialmenot[.]com, which is a multi-tenant infrastructure used by Iranian APT actors.