• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Handala Group Network IOCs

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Nafis Shaikh@Nafis369
    •updated Jun 16, 2026•5•0•17

    Detects network connections to known C2, VPS, VPN, and Starlink IP addresses and ranges used by the Handala group (Void Manticore) for their operations.

    Sigma

    Tags

    T1133 - External Remote ServicesT1090.003 - Multi-hop ProxyG0134 - Transparent TribeTA0003 - PersistenceTA0001 - Initial AccessTA0011 - Command and ControlNetwork ConnectionNetwork Connection OutboundNetwork GenericGeneric Network Logattack.t1133attack.t1090.003attack.g0134

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?