Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects exploitation attempts against LB-LINK routers via parameter injection in the 'set_LimitClient_cfg' endpoint (CVE-2023-26801) and subsequent command-and-control behavior, including outbound connections to known RondoDox staging IPs and DNS queries for associated malicious domains.
avatar
Ibrahim Saud@tektrix
avatar
Detections.ai Community
4 months ago
003