Palo: "Almost Half of Malware Samples Communicate Direct to IP"
Also Palo: "We don't understand why you want to Block-by-ASN."
https://unit42.paloaltonetworks.com/malware-bypass-dns-direct-to-ip/
#blueteam #asn #paloaltonetworks #unit42
B'ad Samurai :ifin:
npub1ct…43ll8
2026-08-04 15:35:37 UTC
Author Public Key
npub1cttkhuyqqd467e9e6j2vkvzl3mp3mh4v8dt3j7au7fy637e70pzq443ll8Seen on
wss://relay.momostr.pinkPublished at
2026-08-04 15:35:37 UTCEvent JSON
{
"id": "e6bc71beede6ce9c510f340388a5833b110d3f52e3ac788e678d59b5f08ccd63",
"pubkey": "c2d76bf080036baf64b9d494cb305f8ec31ddeac3b57197bbcf249a8fb3e7844",
"created_at": 1785857737,
"kind": 1,
"tags": [
[
"t",
"blueteam"
],
[
"t",
"paloaltonetworks"
],
[
"t",
"asn"
],
[
"t",
"unit42"
],
[
"proxy",
"https://infosec.exchange/@badsamurai/117037972680494263",
"web"
],
[
"proxy",
"https://infosec.exchange/users/badsamurai/statuses/117037972680494263",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/badsamurai/statuses/117037972680494263",
"pink.momostr"
],
[
"-"
]
],
"content": "Palo: \"Almost Half of Malware Samples Communicate Direct to IP\"\n\nAlso Palo: \"We don't understand why you want to Block-by-ASN.\"\n\nhttps://unit42.paloaltonetworks.com/malware-bypass-dns-direct-to-ip/\n\n#blueteam #asn #paloaltonetworks #unit42",
"sig": "c435fcb4230c2dfbad407b47adf5144e40a99e61615b5c759624b93e787db08a6e6471283473939d124568662217edad7de349391264142994d5fd7ebfd68b5b"
}