Netskope Threat Labs

MALWARE-CNC FIN6.BULLZLINK C2 check-in detected

IPS-SWG

1 SID: 152085

First seen
April 2026
Last seen
September 2026

Detects check-in beacon traffic from a compromised host associated with the FIN6.BULLZLINK malware family.