Potential Hello-World Scraper Botnet Activity

SigmaHQ Detections@sigmaHQ

•updated Oct 1, 2025•1•0•22

Detects network traffic potentially associated with a scraper botnet variant that uses the "Hello-World/1.0" user-agent string and performs GET requests. This activity is indicative of reconnaissance or data scraping.