StopAndProtect C2 endpoint access on compromised WordPress infrastructure
Detects HTTP traffic to StopAndProtect's compromised-WordPress C2 operational endpoints, heartbeat beaconing, encrypted-archive exfiltration, and victim data directory access.
Suricata
