Operation DragonReturn: DcRAT phishing PDF lure dropping ITR ZIP payload
Detects endpoint activity associated with the Operation DragonReturn phishing campaign, including DNS resolution of known malicious domains, download of specific malicious ZIP archives, execution of extracted dropper files, and network communication with identified command-and-control infrastructure.
SentinelOne
