All Detections

OceanLotus Downloader API Request

avatar
nomit vyas@xoxo
updated Jun 24, 2026005

Detects HTTP POST requests directed to /V1/Update/GetUpdate, indicative of the OceanLotus downloader retrieving the next-stage payload (SPECTRALVIPER).

Sigma