Netskope Threat Labs

MALWARE-CNC UNC5667.STAGEHAND C2 registration traffic detected

IPS-SWG

1 SID: 170260

First seen
April 2026
Last seen
September 2026

Detects command and control traffic from a compromised host associated with the UNC5667.STAGEHAND malware family.

No cross-references or related blog posts found for this signature.