ET MALWARE Redhive Staging Domain in TLS SNI (gitsl .xyz)

7.0.35.0SID: 2072613Rev: 1Enabled0 views
Sourceet/open
Fileemerging-malware.rules
CreatedOctober 21, 2026
UpdatedOctober 30, 2026
Classificationdomain-c2
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Redhive Staging Domain in TLS SNI (gitsl .xyz)"; flow:established,to_server; tls.sni; content:"gitsl.xyz"; endswith; classtype:domain-c2; sid:2072613; rev:1; metadata:created_at 2026_10_21, signature_severity Unknown, updated_at 2026_10_30, former_sid 2868896;)

Metadata

created at2026_10_21
signature severityUnknown
updated at2026_10_30
former sid2868896

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!