Possible Sliver C2 beacon - minimal self-signed TLS certificate with no SNI to external host

Duo Tech@duotech

•updated Aug 10, 2026•0•0•8

Network detection for Sliver C2 framework beaconing, tightened to require JA3/JA3S fingerprints and certificate-field patterns characteristic of Sliver's default TLS templates rather than generic self-signed certificates.