Netskope Threat Labs

MALWARE-CNC APT29.Backdoor.SOLARFLARE.C2 variant outbound traffic detected

IPS-SWG

2 SIDs: 170226, 170227

First seen
February 2026
Last seen
September 2026

Detects command and control traffic from a compromised host associated with the APT29.Backdoor.SOLARFLARE malware family.