SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209808Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedJune 4, 2026
UpdatedJune 4, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"56:4b:49:02:e1:2a:04:12:bc:9d:f5:36:9f:51:cd:6d:27:3d:59:74"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/564b4902e12a0412bc9df5369f51cd6d273d5974/; sid:903209808; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/564b4902e12a0412bc9df5369f51cd6d273d5974/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!