SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209768Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedMay 28, 2026
UpdatedMay 28, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"1b:69:70:67:f6:99:bc:99:bf:6a:48:d0:03:bf:d9:c9:b2:89:45:0d"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/1b697067f699bc99bf6a48d003bfd9c9b289450d/; sid:903209768; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/1b697067f699bc99bf6a48d003bfd9c9b289450d/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!