SSLBL: Malicious SSL certificate detected (PureHVNC C&C)

SID: 903209620Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedMay 5, 2026
UpdatedMay 5, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureHVNC C&C)"; tls_cert_fingerprint; content:"cc:e1:28:66:18:8d:c3:93:f3:c4:e1:51:ca:f3:8e:32:54:3a:9c:65"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/cce12866188dc393f3c4e151caf38e32543a9c65/; sid:903209620; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/cce12866188dc393f3c4e151caf38e32543a9c65/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!