THL AI-Agent-Campaign Hysteria v2 QUIC bing.com SNI Masquerade on GHOST Kit Operator Ports
Sourcehunters-ledger
Filehunters-ledger.rules
CreatedJuly 13, 2026
UpdatedAugust 21, 2026
Classificationtrojan-activity
alert quic $HOME_NET any -> any [14433,14444] (msg:"THL AI-Agent-Campaign Hysteria v2 QUIC bing.com SNI Masquerade on GHOST Kit Operator Ports"; flow:to_server; quic.sni; content:"bing.com"; nocase; threshold:type limit,track by_src,count 1,seconds 3600 ; classtype:trojan-activity; sid:3500146; rev:2; metadata:author The_Hunters_Ledger, date 2026-05-25, modified 2026-08-20, reference https://the-hunters-ledger.com/hunting-detections/ai-agent-frameworks-2026-05-23-detections/ ;)
Metadata
authorThe_Hunters_Ledger
date2026-05-25
modified2026-08-20
referencehttps://the-hunters-ledger.com/hunting-detections/ai-agent-frameworks-2026-05-23-detections/
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!