DNS/HTTP lookup to Exvicy pop-under/loader-branded lure domains
Detects DNS lookups and subsequent HTTP requests to known domains associated with the Exvicy pop-under/loader malware. These domains are identified as malicious lures often used to initiate payload downloads.
Suricata
