Stats
- First seen
- April 2026
- Last seen
- September 2026
Description
Detects command and control traffic from a compromised host associated with the UNC5795.HOTAIR malware family.
No cross-references or related blog posts found for this signature.
MALWARE-CNC UNC5795.HOTAIR.C2 outbound traffic detected
IPS-SWG
1 SID: 170261