SmartApeSG - WizzleTicks Alternate Payload Endpoint
Detects browser network events fetching secondary stage loaders from api.wizzleticks.com, specifically when initiated by cmd.exe, powershell.exe, or mshta.exe. This indicates a potential supply chain attack where a legitimate process is used to download and execute malicious content.
Microsoft Sentinel (KQL)
