Netskope Threat Labs

MALWARE-CNC UNC1543.FAKEUPDATES C2 check-in detected

IPS-SWG

1 SID: 152086

First seen
April 2026
Last seen
September 2026

Detects check-in beacon traffic from a compromised host associated with the UNC1543.FAKEUPDATES malware family.