DNS resolution to CrashStealer campaign C2 IP 179.43.166.242
Detects DNS query attempts to a known malicious IP address (179.43.166.242) associated with the CrashStealer malware campaign, indicating potential command-and-control communication.
Suricata
