avatar

Eran Yosef

@Zaku7892
0 followers4 downloads15 copies0 likes154 views

1 detection

Detects outbound network connections to a known PCPcat C2 server IP address on specific ports used for API communication, reverse tunneling, and payload distribution. This rule identifies potential command and control activity and data exfiltration attempts by monitoring network traffic to a hardcoded malicious IP and associated non-standard ports.
avatar
Eran Yosef@Zaku7892
avatar
Detections.ai Community
10 months ago
150154