LabubaRAT Host and Security-Software Profiling Data Beaconed to C2

Kaung Khant Ko@kaungkhantko

•updated Jul 15, 2026•1•0•1

This rule detects the exfiltration or beaconing of host profiling information, including security software, browser, UAC, hardware (CPU/RAM), and domain details, by the LabubaRAT remote access tool over a proxy or web-based connection.