SSLBL: Malicious SSL certificate detected (OrcusRAT C&C)

SID: 903202480Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OrcusRAT C&C)"; tls_cert_fingerprint; content:"f0:f6:30:28:24:cd:73:b2:c8:b6:dd:8e:0c:d3:25:a3:ef:08:24:09"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/f0f6302824cd73b2c8b6dd8e0cd325a3ef082409/; sid:903202480; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/f0f6302824cd73b2c8b6dd8e0cd325a3ef082409/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!