Operator infrastructure: Moldova campaign .top domains and RoyaleHosting/rented
Detects outbound network connections to known campaign staging domains or rented infrastructure IPs associated with specific threat activity.
Microsoft Sentinel (KQL)
Detects outbound network connections to known campaign staging domains or rented infrastructure IPs associated with specific threat activity.
Already have an account?