Description
Detects traffic identifying the implant by its user agent associated with the GitHub API request with spoofed OneDrive malware family.
No cross-references or related blog posts found for this signature.
MALWARE-CNC GitHub API request with spoofed OneDrive user agent
IPS-SWG
1 SID: 192311