SSLBL: Malicious SSL certificate detected (EternalRocks C&C)

SID: 903208940Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedFebruary 17, 2026
UpdatedFebruary 17, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (EternalRocks C&C)"; tls_cert_fingerprint; content:"99:cc:da:51:0a:0a:8e:3f:69:2a:e9:aa:b9:85:e1:5b:d3:ac:16:19"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/99ccda510a0a8e3f692ae9aab985e15bd3ac1619/; sid:903208940; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/99ccda510a0a8e3f692ae9aab985e15bd3ac1619/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!