SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209833Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedJune 6, 2026
UpdatedJune 6, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"44:d3:17:f1:bd:fc:f7:67:0d:28:8c:91:2c:ec:d0:73:7b:c4:cc:1b"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/44d317f1bdfcf7670d288c912cecd0737bc4cc1b/; sid:903209833; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/44d317f1bdfcf7670d288c912cecd0737bc4cc1b/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!