SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903209917Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 15, 2026
UpdatedJune 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"62:f5:d8:86:c3:4c:ff:ea:5d:8f:60:f0:f9:5b:4b:a6:40:ba:73:ed"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/62f5d886c34cffea5d8f60f0f95b4ba640ba73ed/; sid:903209917; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/62f5d886c34cffea5d8f60f0f95b4ba640ba73ed/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!