Skip to content
Threat Feed
Subscribe

Tag

Network-Reconnaissance

1 brief RSS
medium advisory

Windows Processes Gathering Network Information via IP Check Web Services

Detection of Windows processes using IP check web services for reconnaissance, a behavior commonly associated with malware like Trickbot, by monitoring DNS queries.

Windows network-reconnaissance malware-behavior
2r 1t 26i