Koktevrat Android RAT C2 TLS SNI contact

Arnold Chan@slaz

•updated 22 days ago•0•0•1

Detects outbound network communication patterns (DNS lookups and TLS SNI traffic) associated with the Koktevrat Android RAT. The rule monitors for connections to known malicious domains used for command-and-control (C2) operations.