SSLBL: Malicious SSL certificate detected (TrickBot C&C)

SID: 903202130Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (TrickBot C&C)"; tls_cert_fingerprint; content:"46:f1:6d:f3:09:11:fc:3f:3a:ef:08:8d:20:6a:87:32:36:c8:70:ea"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/46f16df30911fc3f3aef088d206a873236c870ea/; sid:903202130; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/46f16df30911fc3f3aef088d206a873236c870ea/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!