SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209891Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 14, 2026
UpdatedJune 14, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"d3:cc:58:d4:23:56:a8:c4:43:6a:e4:c5:34:05:88:91:f7:aa:47:04"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/d3cc58d42356a8c4436ae4c534058891f7aa4704/; sid:903209891; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/d3cc58d42356a8c4436ae4c534058891f7aa4704/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!