SloppyRAT Reverse SOCKS Proxy C2 via /api/poll and /api/proxy/ack

Ibrahim Saud@tektrix

•updated Sep 19, 2026•0•0•2

Detects network activity associated with the SloppyRAT malware, specifically tracking the polling mechanism for reverse SOCKS proxy tasks and subsequent acknowledgment of these tasks via HTTP requests.