ProRAM DNS-based fallback C2 domain query (clash-verge-upgrade)
Detects DNS queries for 'd.clash-verge-upgrade.com', a domain identified as a Command and Control (C2) fallback transport mechanism for the ProRAM malware.
Suricata

Detects DNS queries for 'd.clash-verge-upgrade.com', a domain identified as a Command and Control (C2) fallback transport mechanism for the ProRAM malware.

Already have an account?