Pastebin raw content request used for C2 config retrieval (Ousaban)

Duo Tech@duotech

•updated Jul 2, 2026•0•0•1

Detects outbound HTTP requests to 'pastebin.com' retrieving raw content, a technique commonly used by Ousaban malware to fetch command-and-control (C2) configurations from legitimate paste sites.