Detects a suspicious curl process start on linux with set useragent options
Read the full analysis on IntelFusions