Mirage2FA - HTTP beacon to known C2/AiTM proxy domain (LinX Coders infrastructure)
Detects outbound network traffic from internal hosts to domains and IP addresses identified as part of the LinX Coders infrastructure used for Mirage2FA adversary-in-the-middle (AiTM) phishing and credential harvesting campaigns.
Suricata
