### Overview
Following the detection of suspicious network activity, further investigation has revealed the execution of a potentially malicious script on multiple network endpoints. The script appears to connect to external command and control (C2) servers, indicating the possibility of an advanced persistent threat (APT) operation.

### Key Findings
- **Script Origin**: The script was deployed from an external IP address linked to known malicious activity.
- **C2 Communication**: Established connections with C2 servers observed in previous Whitefly APT campaigns.
- **Potential Impact**: If left unchecked, the script could allow attackers to execute further malicious activities within the network.

### Recommendations
- Conduct endpoint analysis to identify all systems affected by the script.
- Isolate compromised systems to prevent further execution and communication with C2 servers.