hightestEmerging Threat
Potential Operation Triangulation C2 Beaconing Activity - DNS
Detects potential beaconing activity to domains used in 0day attacks on iOS devices and revealed by Kaspersky and the FSB
Generaldns
2023-06-01
Emerging Threats
Actor2023, 2019
EquationGroup
3Rules
4References
2Folders
2023-06-01Latest
Summary
EquationGroup is tracked here as a threat actor, intrusion set, or campaign with 3 Sigma detections spanning 2023, 2019. Coverage centers on dns, proxy, windows / process_creation.
Related Detections
Search this threathightestEmerging Threat
Potential Operation Triangulation C2 Beaconing Activity - Proxy
Detects potential beaconing activity to domains used in 0day attacks on iOS devices and revealed by Kaspersky and the FSB
Generalproxy
2023-06-01
criticalstableEmerging Threat
Equation Group DLL_U Export Function Load
Detects a specific export function name used by one of EquationGroup tools
windowsprocess_creation
2023-03-09
References