Feodo Tracker: potential QakBot CnC Traffic detected

SID: 900513703Rev: 1Enabled9 views
Filefeodotracker.rules
CreatedFebruary 17, 2026
UpdatedFebruary 17, 2026
Classificationtrojan-activity
alert tcp $HOME_NET any -> [178.62.3.223] 443 (msg:"Feodo Tracker: potential QakBot CnC Traffic detected"; threshold:type limit, track by_src, seconds 60, count 1; classtype:trojan-activity; reference:url, feodotracker.abuse.ch/browse/host/178.62.3.223/; sid:900513703; rev:1;)

References

urlfeodotracker.abuse.ch/browse/host/178.62.3.223/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!