All Detections

OceanLotus Downloader API Request

avatar
Kaung Khant Ko@kaungkhantko
updated Jun 12, 20261026

Detects HTTP POST requests directed to /V1/Update/GetUpdate, indicative of the OceanLotus downloader retrieving the next-stage payload (SPECTRALVIPER).

Sigma