Skip to content
Threat Feed
Subscribe

Product

Large Language Model Services

1 brief RSS
medium advisory

Malware Leveraging Large Language Model Endpoints for Command and Control

This rule detects DNS queries to known Large Language Model (LLM) domains originating from unsigned binaries or common Windows scripting utilities, indicating potential malware command and control activity.

Large Language Model services command_and_control llm malware windows macos
3r 1t 35i