TLS cert from TLC DV TLS CA impersonating Uzbekistan railway authority

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•1

Detects TLS connections where the certificate subject is 'azure.uzrailwaystax.com' and the issuer is 'TLC DV TLS CA', indicating potential impersonation of the Uzbekistan railway authority infrastructure, likely associated with SilkParasite activity.