hightestEmerging Threat
Potential Devil Bait Malware Reconnaissance
Detects specific process behavior observed with Devil Bait samples
windowsprocess_creation
2025-10-19
Emerging Threats
Malware2021
Devil Bait
3Rules
2References
1Folders
2025-10-19Latest
Summary
Devil Bait is tracked here as a malware family or toolset with 3 Sigma detections spanning 2021. Coverage centers on proxy, windows / file_event, windows / process_creation.
Related Detections
Search this threathightestEmerging Threat
Devil Bait Potential C2 Communication Traffic
Detects potential C2 communication related to Devil Bait malware
Generalproxy
2023-08-23
hightestEmerging Threat
Potential Devil Bait Related Indicator
Detects the creation of ".xml" and ".txt" files in folders of the "\AppData\Roaming\Microsoft" directory by uncommon processes. This behavior was seen common across different Devil Bait samples and stages as described by the NCSC
windowsfile_event
2023-05-15
References