THL GHOST Cryptojacker Kit Hysteria v2 QUIC Backdoor Egress - Known Operator Ports
Sourcehunters-ledger
Filehunters-ledger.rules
CreatedMay 16, 2026
UpdatedJuly 13, 2026
Classificationtrojan-activity
alert udp $HOME_NET any -> any 14433:14444 (msg:"THL GHOST Cryptojacker Kit Hysteria v2 QUIC Backdoor Egress - Known Operator Ports"; threshold:type threshold,track by_src,count 5,seconds 60 ; classtype:trojan-activity; sid:3500023; rev:2; metadata:author The_Hunters_Ledger, date 2026-05-25, reference https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/ , tag Backdoor, tag GHOST_kit, tag Hysteria_v2;)
Metadata
authorThe_Hunters_Ledger
date2026-05-25
referencehttps://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/
tagHysteria_v2
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!