Thomas Wenzke
@badorkadork0 followers11 downloads3 copies0 likes12 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Categories
1
Platforms
1
MITRE Techniques
1
1
Detects network connections to the decoy C2 domain api.anthropic.com originating from development runtimes like Node.js, Python, or Bun. The Miasma/Shai-Hulud malware actively uses this specific domain as a decoy to obscure its data exfiltration and C2 traffic.
