ShadowPad HTTPS beacon to hardcoded C2 domain ms.checrity[.]com
Detects outbound TLS traffic where the Server Name Indication (SNI) matches the hardcoded domain 'ms.checrity.com', which is associated with ShadowPad backdoor activity.
Suricata
Detects outbound TLS traffic where the Server Name Indication (SNI) matches the hardcoded domain 'ms.checrity.com', which is associated with ShadowPad backdoor activity.
Already have an account?