SourTrade Malvertising - Exact DNS Query Match to Known Malicious Infrastructure Domain
Detects DNS queries matching known malicious infrastructure domains identified in SourTrade malvertising campaigns. These domains are often used by threat actors to host malicious payloads or C2 infrastructure.
Suricata

