Remote Mouse Socket.IO Simulated Keystroke Injection (Port 1313)

Ibrahim Saud@tektrix

•updated Jul 2, 2026•0•0•3

Detects network activity over port 1313 containing Socket.IO payloads with keywords 'control' and 'escape', indicative of a command and control or remote access channel often associated with interactive shells or administrative backdoors.