SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209656Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedMay 15, 2026
UpdatedMay 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"bb:1d:f8:c1:e6:23:64:08:eb:85:29:4e:9c:e0:02:f9:22:2e:57:db"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/bb1df8c1e6236408eb85294e9ce002f9222e57db/; sid:903209656; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/bb1df8c1e6236408eb85294e9ce002f9222e57db/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!