Devil-Bait

Devil Bait Potential C2 Communication Traffic

Aug 23, 2023 · attack.command_and_control detection.emerging_threats ·

Share on:

Detects potential C2 communication related to Devil Bait malware

Potential Devil Bait Malware Reconnaissance

Jun 20, 2023 · attack.execution attack.t1218 detection.emerging_threats ·

Share on:

Detects specific process behavior observed with Devil Bait samples

Potential Devil Bait Related Indicator

Jun 20, 2023 · attack.defense_evasion detection.emerging_threats ·

Share on:

Detects the creation of ".xml" and ".txt" files in folders of the "\AppData\Roaming\Microsoft" directory by uncommon processes. This behavior was seen common across different Devil Bait samples and stages as described by the NCSC