Description
Detects reconnaissance requests that probe a Magento server for the StyleSmuggler campaign's marker header. The pattern shows a second actor scanning for servers the first operator compromised, which lets defenders identify affected hosts before full exploitation.