BeardShell C2 via Icedrive
Detects outbound network traffic to Icedrive domains from non-browser and non-Icedrive client processes, which could indicate C2 communication by the BeardShell implant used by Sednit (APT28).
Sigma
Detects outbound network traffic to Icedrive domains from non-browser and non-Icedrive client processes, which could indicate C2 communication by the BeardShell implant used by Sednit (APT28).
Already have an account?