SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903209772Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedMay 28, 2026
UpdatedMay 28, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"a9:f5:a1:cd:f5:c8:16:82:62:c2:e6:cf:93:51:69:8e:15:6e:ee:bd"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/a9f5a1cdf5c8168262c2e6cf9351698e156eeebd/; sid:903209772; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/a9f5a1cdf5c8168262c2e6cf9351698e156eeebd/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!