SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209065Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedFebruary 27, 2026
UpdatedFebruary 27, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"1c:4c:19:48:32:b7:eb:24:12:d8:2d:51:36:ac:cd:e3:82:1b:b1:86"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/1c4c194832b7eb2412d82d5136accde3821bb186/; sid:903209065; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/1c4c194832b7eb2412d82d5136accde3821bb186/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!