Suspicious Outbound SSL Connections Using Rare Certificate Metadata – Possible PureRAT Activity

Kyaw Pyiyt Htet@MikoyanDee

•updated Jul 18, 2025•13•5•89

This detection identifies outbound SSL connections where the certificate issuer or subject matches suspicious strings associated with PureRAT infrastructure.