Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Jul 5, 2026, 4:07 AM
THE HUNTERS LEDGER - Inkognito CryptOne Fake Exchange TLS SNI Match
Sourcehunters-ledger
Filehunters-ledger.rules
CreatedMay 16, 2026
UpdatedMay 16, 2026
Classificationtrojan-activity
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"THE HUNTERS LEDGER - Inkognito CryptOne Fake Exchange TLS SNI Match"; flow:established,to_server ; tls.sni; content:"cryptone.bot"; endswith; nocase; sid:1900030; rev:1; classtype:trojan-activity; metadata:affected_product Web_Browser, attack_target Client_Endpoint, created_at 2026_05_16, deployment Perimeter, signature_severity Critical, tag Inkognito;)
Metadata
affected productWeb_Browser
attack targetClient_Endpoint
created at2026_05_16
deploymentPerimeter
signature severityCritical
tagInkognito
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!