Outbound TLS to Known FamousSparrow SparroWocky C2 IPs

Ibrahim Saud@tektrix

•updated Sep 17, 2026•0•0•0

Detects outbound network traffic (TCP and TLS) from internal hosts to known command and control (C2) infrastructure associated with the FamousSparrow threat actor and their SparroWocky malware suite.