T1090 Proxy - PySoxy SOCKS Proxy
PySoxy is a SOCKS proxy follow-on observed in recent ClickFix campaigns, serving to establish additional C2 and persistence on a victim. In the reference article attached, the command line for this Python-based SOCKS proxy leveraged a compiled Python (.pyc) file, and required specifying both a remote IP and remote port for the outbound connection.
Microsoft Sentinel (KQL)
