Atlas RAT TCP Port 886 C2
Detects network traffic over TCP port 886, which is specifically used by Atlas RAT for command and control check-ins, plugin downloads, and encrypted data exfiltration in TA4922 campaigns.
Sigma
Detects network traffic over TCP port 886, which is specifically used by Atlas RAT for command and control check-ins, plugin downloads, and encrypted data exfiltration in TA4922 campaigns.
Already have an account?