DNS TXT Query for _beacon Fallback C2 Address (mangorbit[.]com Campaign)
Detects DNS TXT queries for the _beacon fallback command-and-control subdomain under mangorbit.com, associated with the Open VSX evil twin extension campaign.
Suricata

Detects DNS TXT queries for the _beacon fallback command-and-control subdomain under mangorbit.com, associated with the Open VSX evil twin extension campaign.

Already have an account?