Netskope Threat Labs

MALWARE-CNC UNC5667.SOFTMETAL.C2 configuration retrieval inbound traffic detected

IPS-SWG

1 SID: 170290

First seen
May 2026
Last seen
October 2026

Detects command and control traffic from a compromised host associated with the UNC5667.SOFTMETAL malware family.

No cross-references or related blog posts found for this signature.