Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3 detections
Filters
Last updated
All Time
Detection languages
3
Contributors
1
1
1
Categories
3
2
1
1
1
Platforms
3
Products / Services
3
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
Detects network connections or DNS queries to ErrTraffic Beer cluster domains impersonating AI platforms (ChatGPT, Google Antigravity) delivering DanaBot/HijackLoader via BSOD or reCAPTCHA ClickFix lures, and subsequent browser-spawned PowerShell execution.
KQL Query from file: ClickFix social engineering attack detection
Use this query to locate injected processes launching discovery activity. Qakbot has been observed leading to ransomware in numerous instances.
