SSLBL: Malicious SSL certificate detected (KongTuke C&C)

SID: 903209819Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedJune 4, 2026
UpdatedJune 4, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (KongTuke C&C)"; tls_cert_fingerprint; content:"71:62:dc:ab:75:90:a4:a6:08:0e:97:d0:4f:49:cf:09:39:db:03:9c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7162dcab7590a4a6080e97d04f49cf0939db039c/; sid:903209819; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/7162dcab7590a4a6080e97d04f49cf0939db039c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!