TryCloudflare Tunnel Misuse for Malware Delivery
Detects the misuse of TryCloudflare tunnels for malware delivery, often involving the download and execution of malicious scripts or payloads. Threat actors abuse the temporary tunnel feature to host and deliver malware.
Sigma

