SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903209916Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 15, 2026
UpdatedJune 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"17:9d:58:74:6e:d8:c7:94:2d:8f:bb:8c:96:f3:61:da:88:46:94:b1"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/179d58746ed8c7942d8fbb8c96f361da884694b1/; sid:903209916; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/179d58746ed8c7942d8fbb8c96f361da884694b1/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!