Montana Empire Phishing Panel Access at pttvm.com/mentalite.php
Detects outbound HTTP requests to a known phishing infrastructure panel associated with the Montana Empire malware campaign, specifically targeting the /mentalite.php endpoint on pttvm.com.
Suricata

