• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Operation CameraSwarm - Telegram Bot API sendPhoto exfil of camera credentials

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Arnold Chan@slaz
    •updated Sep 19, 2026•0•0•0

    Detects unauthorized exfiltration of sensitive information, such as camera credentials or location data, directed to the Telegram Bot API as part of the 'Operation CameraSwarm' campaign.

    Suricata

    Tags

    TA0011 - Command and ControlT1071.001 - Web ProtocolsT1041 - Exfiltration Over C2 ChannelT1567.004 - Exfiltration Over WebhookTA0010 - ExfiltrationNetwork Connection OutboundHTTP RequestData ExfiltrationIDS IPS AlertNetwork GenericSuricata IDSSnort IDSHTTPCommand And Control

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?