THL UTA-2026-014 Matrix C2 Discord Bot Attack-Method Dispatch syn-storm-frag-storm (DDoS-as-a-Service Customer Interface, Requires TLS Interception)
Sourcehunters-ledger
Filehunters-ledger.rules
CreatedMay 26, 2026
UpdatedJuly 13, 2026
Classificationtrojan-activity
alert http $HOME_NET any -> any any (msg:"THL UTA-2026-014 Matrix C2 Discord Bot Attack-Method Dispatch syn-storm-frag-storm (DDoS-as-a-Service Customer Interface, Requires TLS Interception)" ; flow:established,to_server ; http.host; content:"discord.com"; http.request_body; pcre:"/(?:syn-storm|frag-storm|udp-bypass|icmp-hell)/i" ; classtype:trojan-activity; sid:3500088; rev:2; metadata:author The_Hunters_Ledger, date 2026-05-26, reference https://the-hunters-ledger.com/hunting-detections/rovodev-mirai-matrix-c2-87.106.143.220-detections/ ;)
Metadata
authorThe_Hunters_Ledger
date2026-05-26
referencehttps://the-hunters-ledger.com/hunting-detections/rovodev-mirai-matrix-c2-87.106.143.220-detections/
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!