MALWARE-CNC Python.Backdoor.Beacon traffic detected

IPS-SWG

1 SID: 150766

Stats

First seen: February 2024
Last seen: September 2026

Description

Detects beaconing activity from a compromised host associated with Python.Backdoor, a Python malware family.

Related blogs

Shared beacon code that fingerprints the visitor (browser, OS, device, country), encrypts the record with ECDH P-256 and AES-GCM, and posts it to the collect endpoint

EtherHiding in the Browser: ClickFix Chain Ends in Amatera

August 25, 202612 min read

Developers in the Crosshairs: Fake AI Tools Deliver Infostealer

Developers in the Crosshairs: Fake AI Tools Deliver Infostealer

August 3, 20268 min read

DCRat Targets Users with HTML Smuggling

DCRat Targets Users with HTML Smuggling

September 26, 20245 min read

New DarkGate Variant Uses a New Loading Approach

New DarkGate Variant Uses a New Loading Approach

November 1, 20236 min read

SquirrelWaffle: New Malware Loader Delivering Cobalt Strike and QakBot

SquirrelWaffle: New Malware Loader Delivering Cobalt Strike and QakBot

October 7, 20216 min read