SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903209912Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedJune 15, 2026
UpdatedJune 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"f2:69:52:07:db:45:6e:19:37:4c:ed:7d:50:8a:b8:70:e1:73:b5:23"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/f2695207db456e19374ced7d508ab870e173b523/; sid:903209912; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/f2695207db456e19374ced7d508ab870e173b523/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!