AutoJack MCP WebSocket Loopback Abuse by AutoGen Studio Browsing Agent

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•2

Detects suspicious WebSocket connections initiated by AutoGen Studio processes to localhost on ports 8080 or 8081, indicative of the AutoJack exploit chain bypassing loopback trust boundaries. This rule specifically looks for Python processes associated with 'autogenstudio' making these connections or for network events where the RemoteUrl contains 'ws://localhost', 'ws://127.0.0.1', '/api/mcp/ws/', or 'server_params='.