• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    PamStealer - DNS query for malicious domain maccyapp.com

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Duo Tech@duotech
    •updated Jul 6, 2026•1•0•6

    Detects network activity (DNS queries, HTTP requests, and TLS SNI) associated with the PamStealer malware communicating with its known command and control domain maccyapp.com.

    Suricata

    Tags

    T1105 - Ingress Tool TransferTA0011 - Command and ControlNetwork ConnectionNetwork Connection OutboundDNS QueryHTTP RequestIDS IPS AlertNetwork GenericSuricata IDSSnort IDSDNSTrojan Activity

    Found in

    • PamStealer Rust-based macOS Infostealer via PAM ValidationLast updated Jul 6, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?