🐾 - 🚨 Suspicious TLS Certificate : CN=localhost
Sourcepawpatrules
CreatedMay 14, 2021
UpdatedDecember 3, 2022
Classificationtrojan-activity
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"🐾 - 🚨 Suspicious TLS Certificate : CN=localhost"; flow:to_client, stateless; tls.cert_subject; content:"CN=localhost"; nocase; metadata:created_at 2021_05_14, updated_at 2022_12_03; sid:3300653; rev:5; classtype:trojan-activity;)
Metadata
created at2021_05_14
updated at2022_12_03
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!