Netskope Threat Labs

ET MALWARE Ducktail Host Profile Exfiltration (POST)

IPS-SWG

1 SID: 2058930

First seen
February 2025
Last seen
June 2025

Detects data exfiltration to operator infrastructure associated with the Ducktail malware family.

No cross-references or related blog posts found for this signature.