TLC DV TLS CA cert with JA4X fingerprint matching typosquat domains

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•4

Detects network traffic associated with the SilkParasite threat actor, specifically identifying the use of typosquatted domain names in TLS Server Name Indication (SNI) fields and a suspicious TLS CA certificate subject.