JadePuffer possible exfiltration to staging server referenced in self-narrated deletion payload (64.20.53.230)
Detects outbound network communication to an IP address (64.20.53.230) identified as a staging server associated with the JadePuffer activity. This activity involves potential data exfiltration following self-narrated deletion payloads.
Suricata
