SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209653Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedMay 14, 2026
UpdatedMay 14, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"33:ce:73:73:54:5e:e4:9e:aa:e6:0e:70:c8:1c:a1:c1:76:80:61:ea"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/33ce7373545ee49eaae60e70c81ca1c1768061ea/; sid:903209653; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/33ce7373545ee49eaae60e70c81ca1c1768061ea/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!