SSLBL: Malicious SSL certificate detected (CountLoader C&C)

SID: 903209794Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedJune 3, 2026
UpdatedJune 3, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (CountLoader C&C)"; tls_cert_fingerprint; content:"fc:8b:f4:9f:99:72:0c:d6:30:6c:d7:ab:89:e5:2c:3c:0b:94:74:43"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/fc8bf49f99720cd6306cd7ab89e52c3c0b947443/; sid:903209794; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!