Netskope Threat Labs

MALWARE-CNC APT.PENCILDOWN.Check-in traffic detected

IPS-SWG

1 SID: 150586

First seen
May 2023
Last seen
September 2026

Detects check-in beacon traffic from a compromised host associated with the APT.PENCILDOWN malware family.

No cross-references or related blog posts found for this signature.