Myxa VPN fake-VPN Chrome extension IDs and C2 IP connections
This rule detects potential infection by fake-VPN browser extensions associated with the 'Myxa VPN' campaign by monitoring for specific file paths and filenames linked to known malicious extension IDs. Additionally, it monitors for network connections to known command-and-control IP addresses associated with this campaign.
Microsoft Sentinel (KQL)
