Beacon to rutracker.org with UUID-style install identifier

Ankit Mehta@Secvyn

•updated 7 days ago•0•0•0

Detects anomalous outbound HTTP/TLS requests to rutracker.org that contain a GUID-like identifier in the URI or deviate from normal user traffic patterns, which is characteristic of the 'VPN-for-X' browser extension acting as a command-and-control beacon.