All Detections

Xillenstealer Telegram Exfiltration

avatar
Tim Peck@timpeck
updated Sep 16, 2025074

Detects processes potentially related to XillenStealer making outbound network connections or DNS queries for telegram.org. This is indicative of command and control or data exfiltration activity.

YARA-L