NodeEdgeRAT C2 - hoster-kg[.]com DNS/TLS/IP Communication

Ibrahim Saud@tektrix

•updated Sep 20, 2026•1•0•3

Detects network activity associated with the SilkParasite actor's NodeEdgeRAT malware, including DNS queries, TLS SNI, HTTP Host headers, and direct IP connections to the identified command-and-control infrastructure 'hoster-kg.com'.