SSLBL: Malicious SSL certificate detected (Gozi C&C)

SID: 903203655Rev: 1EnabledDerived3 views
Filesslblacklist_tls_cert.rules
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Gozi C&C)"; tls_cert_fingerprint; content:"98:7e:f1:c3:59:d7:98:80:b9:e5:d2:9f:22:ab:63:b9:48:a0:b0:9e"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/987ef1c359d79880b9e5d29f22ab63b948a0b09e/; sid:903203655; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/987ef1c359d79880b9e5d29f22ab63b948a0b09e/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!