Skip to content
THE HUNTER’S LEDGER
ATT&CK Technique · Impact
T1498.001 Direct Network Flood
Mapped by 1 report, 6 detection rules and 1 tracked actor on The Hunters Ledger. Technique page on attack.mitre.org.

← All techniques and the coverage heatmap

Reports

Each report maps this technique in its own ATT&CK table, at the confidence the report states. The link opens that table.

Report Mar 2026 · under Impact · HIGH
ZeroTrace Multi-Family MaaS Operation (74.0.42.25)

Detection rules

Rules whose ATT&CK coverage line names this technique, by detection page. The link opens the page's coverage table.

Detection rules May 2026 · 6 rules
Rovodev AI-Co-Authored Mirai Variant + Matrix C2 (87.106.143.220)
MAL_ELF_Naku_Pandora_Mirai_Family (YARA, Detection); MAL_Python_Matrix_C2_Framework_Family (YARA, Detection); MAL_Discord_Bot_DDoSasService_Customer_Interface (YARA, Detection); Discord Bot API Egress with Attack-Method Dispatch Payload from Server Host (SIGMA, Hunting); Matrix C2 Discord Bot Attack-Method Dispatch: ovh-nuke (SURICATA, Hunting); Matrix C2 Discord Bot Attack-Method Dispatch: syn-storm/frag-storm/udp-bypass/icmp-hell (SURICATA, Hunting)

Tracked actors

Designations whose reports map this technique.

  • UTA-2026-014: DDoS-for-hire operator running an AI co-authored C2 framework over a Pandora-Mirai botnet

ATT&CK v19.2. MITRE ATT&CK® is a registered trademark of The MITRE Corporation; technique names are MITRE's and link to MITRE's own pages. The mapping on each linked page is this publication's reading of its own evidence.