🐾 - 🚨 Suspicious TLS Certificate : CN=localhost
Sourcepawpatrules
CreatedFebruary 15, 2022
UpdatedDecember 3, 2022
Classificationtrojan-activity
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"🐾 - 🚨 Suspicious TLS Certificate : CN=localhost"; flow:to_client, stateless; tls.cert_subject; content:"CN=localhost"; nocase; metadata:created_at 2022_02_15, updated_at 2022_12_03; sid:3300660; rev:2; classtype:trojan-activity;)
Metadata
created at2022_02_15
updated at2022_12_03
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!