SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209786Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedMay 31, 2026
UpdatedMay 31, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"39:c7:5b:70:60:65:6d:4d:f1:01:e3:bf:55:92:4e:78:c9:2a:e7:16"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/39c75b7060656d4df101e3bf55924e78c92ae716/; sid:903209786; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/39c75b7060656d4df101e3bf55924e78c92ae716/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!