ET MALWARE Redhive Staging Domain in TLS SNI (gitview .sbs)

7.0.35.0SID: 2072614Rev: 1Enabled1 views
Sourceet/open
Fileemerging-malware.rules
CreatedOctober 21, 2026
UpdatedNovember 2, 2026
Classificationdomain-c2
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Redhive Staging Domain in TLS SNI (gitview .sbs)"; flow:established,to_server; tls.sni; content:"gitview.sbs"; endswith; classtype:domain-c2; sid:2072614; rev:1; metadata:created_at 2026_10_21, signature_severity Unknown, updated_at 2026_11_02, former_sid 2868897;)

Metadata

created at2026_10_21
signature severityUnknown
updated at2026_11_02
former sid2868897

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!