Netskope Threat Labs

MALWARE-CNC UNC5667.POTATOWALL.C2 outbound traffic detected

IPS-SWG

1 SID: 170286

First seen
May 2026
Last seen
September 2026

Detects command and control traffic from a compromised host associated with the UNC5667.POTATOWALL malware family.

No cross-references or related blog posts found for this signature.