Cron persistence beaconing every 30 minutes to JadePuffer C2 (45.131.66.106:4444)
Detects the creation of a crontab entry configured to execute a Python one-liner that performs a network connection to a specific remote IP address on port 4444. This behavior is indicative of a persistence mechanism and a C2 (Command and Control) beaconing attempt.
Cortex XDR
