In spring 2026, a cluster of identical servers speaking the Model Context Protocol began appearing across several AWS regions. At first, they did almost nothing.
Then they switched on tools that hand out credentials and execute commands. The cluster grew past 150 nodes, rotated ports daily and changed its tooling while under observation.
MCP now sits inside every major AI platform. Its own specification says it cannot enforce security at the protocol level, and authentication is optional.
In his SecTor 2026 talk, "Ghost Protocol: How the Next C2 Channel Is Deploying While Nobody Is Watching", on Wednesday, October 7 at 10:15 a.m. in Room 701B, Dhia Mahjoub tracks that cluster and what it says about the next generation of C2.
Speaker: Dhia Mahjoub, Cybersecurity Researcher & Product Advisor
He also reports hundreds of exposed MCP servers running plain HTTP with no authentication. Today's defensive tooling does not recognize MCP handshakes or coordinated MCP infrastructure.
Attendees get detection patterns for MCP on unusual ports. They also get a repeatable method for finding exposed servers and separating coordinated clusters from ordinary ones.
Dhia Mahjoub, known online as DhiaLite, has spent more than a decade mapping criminal infrastructure from the network side. He was the first senior researcher at OpenDNS and later became Head of Security Research at Cisco Umbrella.
He has supported law enforcement investigations into cybercrime and bulletproof hosting. He holds a PhD in computer science from Southern Methodist University.
His past work includes "Malicious CDNs" at DEF CON 25, which used SSL certificate scan data to expose the Zbot proxy network. His USENIX Enigma 2017 talk examined bulletproof hosting providers. His full talk history is on InfoConDB.
Threat hunters and anyone running AI agents in the cloud will find this an early look at infrastructure that most tools cannot see yet.
Is anyone here fingerprinting MCP traffic on their network yet, or is it still invisible to your tooling?
Source: r/pwnhub · by /u/_cybersecurity_