AK47C2 DNS Backdoor C2 Communication

Detects DNS queries to a command and control (C2) domain used by the AK47C2 backdoor, which is part of the Project AK47 toolset associated with the CL-CRI-1040 (Storm-2603) threat actor.

Sigma