Djinn Stealer C2 Exfiltration via telemetry-client/1.0 and Known C2 96.126.130.126:58942

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•1

Detects network activity associated with Djinn Stealer malware, identifying either direct connections to a known command-and-control (C2) server or HTTP exfiltration attempts using a characteristic User-Agent string and binary content type.