SSLBL: Malicious SSL certificate detected (OffLoader C&C)

SID: 903208670Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJanuary 1, 2026
UpdatedJanuary 1, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OffLoader C&C)"; tls_cert_fingerprint; content:"7c:f9:9f:f9:b3:5a:8f:0a:73:07:c9:2e:3b:1f:ee:ca:96:17:90:38"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7cf99ff9b35a8f0a7307c92e3b1feeca96179038/; sid:903208670; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/7cf99ff9b35a8f0a7307c92e3b1feeca96179038/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!