BlueNoroff ClickFix Kit - exact TURN relay SNI match to edensun.xyz for mediasoup WebRTC webcam exfil
Detects network indicators related to the BlueNoroff ClickFix Kit, specifically targeting malicious TURN relay domains (edensun.xyz) used for WebRTC-based webcam exfiltration and Command and Control (C2) traffic involving Socket.IO signals that trigger malicious UI modals.
Suricata
