SSLBL: Malicious SSL certificate detected (PureHVNC C&C)

SID: 903209897Rev: 1EnabledDerived3 views
Filesslblacklist_tls_cert.rules
CreatedJune 15, 2026
UpdatedJune 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureHVNC C&C)"; tls_cert_fingerprint; content:"7c:2f:90:bc:6c:e3:5e:24:57:61:74:cd:26:e2:e4:f5:ec:af:97:fe"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7c2f90bc6ce35e24576174cd26e2e4f5ecaf97fe/; sid:903209897; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/7c2f90bc6ce35e24576174cd26e2e4f5ecaf97fe/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!