All Detections

Suspicious Non-Browser Network Communication With Telegram API

avatar
SigmaHQ Detections@sigmaHQ
updated Jul 30, 2025000

Detects an a non-browser process interacting with the Telegram API which could indicate use of a covert C2

Sigma