SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903208178Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedOctober 1, 2025
UpdatedOctober 1, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"18:0e:d3:29:4a:41:ec:bc:a9:91:24:ce:18:4f:d5:3b:54:59:a8:31"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/180ed3294a41ecbca99124ce184fd53b5459a831/; sid:903208178; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/180ed3294a41ecbca99124ce184fd53b5459a831/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!