ET MALWARE Redhive Staging Domain in TLS SNI (viewgit .sbs)

7.0.35.0SID: 2072615Rev: 1Enabled0 views
Sourceet/open
Fileemerging-malware.rules
CreatedOctober 21, 2026
UpdatedOctober 30, 2026
Classificationdomain-c2
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Redhive Staging Domain in TLS SNI (viewgit .sbs)"; flow:established,to_server; tls.sni; content:"viewgit.sbs"; endswith; classtype:domain-c2; sid:2072615; rev:1; metadata:created_at 2026_10_21, signature_severity Unknown, updated_at 2026_10_30, former_sid 2868898;)

Metadata

created at2026_10_21
signature severityUnknown
updated at2026_10_30
former sid2868898

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!