APT28 C2 Domain Connections - wellnessmedcare/freefoodaid/longsauce

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•1

Detects network and DNS activity involving domains known to be used by the threat actor APT28 for command and control, specifically for hosting WebDAV payloads, malicious LNK files, and weaponized documents.