SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209837Rev: 1EnabledDerived3 views
Filesslblacklist_tls_cert.rules
CreatedJune 7, 2026
UpdatedJune 7, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"45:4a:92:d1:6f:44:0a:d8:f1:80:e2:1d:a8:ee:65:52:b1:51:c2:5c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/454a92d16f440ad8f180e21da8ee6552b151c25c/; sid:903209837; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/454a92d16f440ad8f180e21da8ee6552b151c25c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!