SSLBL: Malicious JA3 SSL-Client Fingerprint detected (TrickBot)
alert tls any any -> any any (msg:"SSLBL: Malicious JA3 SSL-Client Fingerprint detected (TrickBot)" ; ja3_hash; content:"8916410db85077a5460817142dcbc8de"; reference:url, sslbl.abuse.ch/ja3-fingerprints/8916410db85077a5460817142dcbc8de/ ; sid:906200094; rev:1;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!