DNS lookups to SilkParasite Central Asian typosquat domains
This rule detects DNS queries for domains associated with the SilkParasite campaign, which leverages typosquatting to impersonate Central Asian government, energy, and telecommunications entities for potential malicious activity.
Suricata

