SSLBL: Malicious SSL certificate detected (Gozi C&C)

SID: 903203195Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Gozi C&C)"; tls_cert_fingerprint; content:"95:35:1c:56:e6:e3:bd:18:eb:0f:5d:53:f0:1c:f6:41:d2:bb:bd:32"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/95351c56e6e3bd18eb0f5d53f01cf641d2bbbd32/; sid:903203195; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/95351c56e6e3bd18eb0f5d53f01cf641d2bbbd32/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!