Stats
- First seen
- December 2025
- Last seen
- September 2026
Description
Detects data exfiltration to operator infrastructure associated with the UNC6320.Vspytunnel malware family.
No cross-references or related blog posts found for this signature.
MALWARE-CNC UNC6320.Vspytunnel.Exfil traffic detected
IPS-SWG
1 SID: 150955