Outbound connection to known Exvicy C2 IP infrastructure

Ibrahim Saud@tektrix

•updated Sep 22, 2026•0•0•2

Detects outbound network traffic from internal hosts directed toward identified Exvicy command-and-control (C2) infrastructure IP addresses. This includes both general beaconing attempts and established TLS handshake sessions potentially linked to post-ClickFix malicious activity.