INTERLOCK NodeSnake RAT DNS lookup (veyko-service.org)

Collin Lairamore@Bollinmore

•updated Jul 28, 2026•0•0•2

This rule monitors DNS queries for the domain 'veyko-service.org', which is identified as being associated with the NodeSnake RAT (Remote Access Trojan). The detection indicates potential command-and-control (C2) activity where an infected host attempts to reach a malicious infrastructure domain.