Skip to content
Threat Feed
Subscribe

Tag

Badpatch

1 brief RSS
low advisory

Detection of Potential Command and Control via SMTP on Port 26/TCP

Adversaries, including the BadPatch malware family, utilize non-standard port 26/TCP for SMTP-based command and control and data exfiltration to evade traditional security monitoring.

command-and-control exfiltration network-traffic smtp badpatch
1r 3t