Devil-Bait

Devil Bait Potential C2 Communication Traffic

Aug 12, 2024 · attack.command-and-control detection.emerging-threats ·

Share on:

Detects potential C2 communication related to Devil Bait malware

Potential Devil Bait Malware Reconnaissance

Aug 12, 2024 · attack.defense-evasion attack.t1218 detection.emerging-threats ·

Share on:

Detects specific process behavior observed with Devil Bait samples

Potential Devil Bait Related Indicator

Aug 12, 2024 · attack.defense-evasion detection.emerging-threats ·

Share on:

Detects the creation of ".xml" and ".txt" files in folders of the "\AppData\Roaming\Microsoft" directory by uncommon processes. This behavior was seen common across different Devil Bait samples and stages as described by the NCSC