LOADER - Telepuz Modular Loader ClickFix Delivery

Ankit Mehta@Secvyn

•updated 10 days ago•1•0•1

Detects outbound HTTP POST requests associated with the Telepuz modular loader. The rule monitors for specific URI patterns, request body parameters, and suspicious User-Agent strings indicative of PowerShell or MSHTA command-and-control communication.