SPECTRALVIPER C2 Communication to OceanLotus Actor-Controlled Infrastructure

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•1

This rule monitors and alerts on network connections established from endpoints to a predefined list of known malicious IP addresses, which may indicate command-and-control (C2) communication or unauthorized exfiltration attempts.