Netskope Threat Labs

MALWARE-CNC APT42.TelegramBot.C2 inbound traffic detected

IPS-SWG

1 SID: 180007

First seen
May 2026
Last seen
September 2026

Detects command and control traffic from a compromised host associated with the APT42.TelegramBot malware family.

No cross-references or related blog posts found for this signature.