ET HUNTING AdFection Related Domain in TLS SNI (platc-tester .com)

7.0.35.0SID: 2072495Rev: 1Enabled2 views
Sourceet/open
Fileemerging-hunting.rules
CreatedOctober 15, 2026
UpdatedOctober 15, 2026
Classificationbad-unknown
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"ET HUNTING AdFection Related Domain in TLS SNI (platc-tester .com)"; reference:url,citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/; classtype:bad-unknown; sid:2072495; rev:1; metadata:affected_product Web_Browsers, affected_product Android, affected_product iOS, attack_target Client_Endpoint, created_at 2026_10_15, deployment Perimeter, malware_family AdFection, performance_impact Low, confidence High, signature_severity Minor, tag Exploit_Kit, updated_at 2026_10_15;)
Detection details are hidden.

References

urlcitizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

Metadata

affected productiOS
attack targetClient_Endpoint
created at2026_10_15
deploymentPerimeter
malware familyAdFection
performance impactLow
confidenceHigh
signature severityMinor
tagExploit_Kit
updated at2026_10_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!