Steam Wallpaper - Network Exfiltration to ey.php
Identifies network traffic to the attacker logging server endpoint ey.php initiated by the wrapper ._cache_GAME1.exe, which is associated with malicious Steam wallpapers.
Microsoft Sentinel (KQL)
Identifies network traffic to the attacker logging server endpoint ey.php initiated by the wrapper ._cache_GAME1.exe, which is associated with malicious Steam wallpapers.
Already have an account?