Network Connection to Microstealer Malicious Domains

Ankit Mehta@Secvyn

•updated Jun 29, 2026•1•0•3

This rule detects network connections to a predefined list of known Microstealer malicious domains. These domains are often associated with malware command and control (C2) infrastructure, phishing, or other malicious activities. Monitoring connections to such domains can help identify compromised systems or active malware infections.