Network traffic to known SpiceRAT C2 IP cluster on ports 80/443

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•2

Detects outbound network traffic from internal hosts to known IP addresses associated with the SpiceRAT malware command and control infrastructure.