Sliver C2 Implant HTTPS mTLS JA3 Fingerprint on Non-Standard Port

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•2

Detects outbound HTTPS traffic on non-standard ports that matches a specific JA3 fingerprint associated with the Sliver command and control framework. This indicates potential beaconing or C2 communication from a compromised host.