TraderTraitor Terraform provider campaign FLATROOF/ROOFDECK domain and URL IOC s

Arnold Chan@slaz

•updated yesterday•3•0•3

Detects network connections to known Indicators of Compromise (IOCs) associated with the TraderTraitor campaign, including trojanized Terraform providers (FLATROOF/ROOFDECK malware families) using specific domains and URL paths.