Rule Info
Name
Potential Hello-World Scraper Botnet Activity
Author
Joseph A. M.
Description
Detects network traffic potentially associated with a scraper botnet variant that uses the "Hello-World/1.0" user-agent string.
Date
2025-08-02 00:00:00
Modified
None
Id
1712bafe-be05-4a0e-89d4-17a3ed151bf5
Tags
attack.reconnaissance attack.t1595
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Joseph A. M.
Merge PR #5577 from @josamontiel - Potential Hello-World Scraper Botnet Activity
2025-10-01
Scan your endpoints, forensic images or collected files with our portable scanner THOR