DNS/TLS lookup to GTA6-themed NetSupport C2 domains

Ibrahim Saud@tektrix

•updated Sep 17, 2026•0•0•1

Detects DNS queries, TLS SNI headers, and HTTP host headers associated with identified C2 infrastructure for NetSupport Manager malware, specifically domains themed around 'GTA6'. These indicators are used by attackers for command and control communication.