# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: backconfig, monsoon, neon, viceroy tiger

# Reference: https://unit42.paloaltonetworks.com/updated-backconfig-malware-targeting-government-and-military-organizations/
# Reference: https://twitter.com/blackorbird/status/1260217348792844289
# Reference: https://twitter.com/K_N1kolenko/status/1187339471647313921
# Reference: https://twitter.com/ccxsaber/status/1187573497851068417
# Reference: https://www.virustotal.com/gui/file/d87b875b8641c538f90fe68cad4e9bdc89237dba137e934f80996e8731059861/detection
# Reference: https://otx.alienvault.com/pulse/5ebac662ee27db27e3174795

http://185.203.119.184
http://212.114.52.148
linkrequest.live
matissues.com
unique.fontsupdate.com
/request/httpsrequest
