Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Emerging Threats
    Malware2025

    Kalambur Backdoor Curl TOR SOCKS Proxy Execution

    1Rules
    1References
    1Folders
    2025-02-11Latest
    Summary

    Kalambur Backdoor Curl TOR SOCKS Proxy Execution is tracked here as a malware family or toolset with 1 Sigma detection spanning 2025. Coverage centers on windows / process_creation.

    Related Detections
    Search this threat
    1 rulesInspect a rule without leaving your results.
    highexperimentalEmerging Threat

    Kalambur Backdoor Curl TOR SOCKS Proxy Execution

    Detects the execution of the "curl.exe" command, referencing "SOCKS" and ".onion" domains, which could be indicative of Kalambur backdoor activity.

    windowsprocess_creation
    2025-02-11
    References
    1
    Resolving title…
    blog.eclecticiq.com