UAC-0226 GIFTEDCROOK C2 TLS Beacon to Known Infrastructure
This rule detects outbound TLS connections to identified C2 infrastructure associated with the UAC-0226 threat actor and the GIFTEDCROOK malware, specifically by monitoring the certificate subject name 'NextGen Fusion'.
Suricata
