SSLBL: Malicious SSL certificate detected (KongTuke C&C)

SID: 903209888Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJune 12, 2026
UpdatedJune 12, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (KongTuke C&C)"; tls_cert_fingerprint; content:"e8:1b:ed:d0:d6:28:05:a9:bc:ad:2b:1c:d6:52:43:5c:d9:a5:9b:cc"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/e81bedd0d62805a9bcad2b1cd652435cd9a59bcc/; sid:903209888; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/e81bedd0d62805a9bcad2b1cd652435cd9a59bcc/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!