INTERLOCK NodeSnake RAT DNS lookup (xoredo-srv.com)

Collin Lairamore@Bollinmore

•updated Jul 28, 2026•0•0•1

This rule detects DNS queries for the domain 'xoredo-srv.com', which is associated with the INTERLOCK NodeSnake RAT for command and control communications.