SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209789Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedMay 31, 2026
UpdatedMay 31, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"b7:33:67:3f:2c:22:14:00:c4:e1:4b:b6:ce:a0:f5:28:a5:df:f3:37"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b733673f2c221400c4e14bb6cea0f528a5dff337/; sid:903209789; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b733673f2c221400c4e14bb6cea0f528a5dff337/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!