SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903207544Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"26:cd:7d:4f:a0:7b:c3:5d:bc:ed:f8:dc:98:69:e7:1d:d8:a6:28:39"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/26cd7d4fa07bc35dbcedf8dc9869e71dd8a62839/; sid:903207544; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/26cd7d4fa07bc35dbcedf8dc9869e71dd8a62839/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!