DAEMON Tools Supply Chain C2 Network Traffic

Georgios Maragos@Gmarak

•updated May 7, 2026•15•0•623

Detects DNS requests or network connections to the typosquatted domain and hardcoded IP associated with the DAEMON Tools supply chain attack, as well as additional network relations tied to the installer.