PhantomRaven Mozbra Exfiltration Endpoint Detection
Detects HTTP network connections to the specific exfiltration endpoint (mozbra.php) used by PhantomRaven to exfiltrate stolen CI/CD tokens and developer credentials.
Cortex XDR
Detects HTTP network connections to the specific exfiltration endpoint (mozbra.php) used by PhantomRaven to exfiltrate stolen CI/CD tokens and developer credentials.
Already have an account?