SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903209925Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedJune 15, 2026
UpdatedJune 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"71:5d:d7:5b:29:6c:7d:c5:0f:70:2a:0f:22:49:55:07:7e:a1:7b:8a"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/715dd75b296c7dc50f702a0f224955077ea17b8a/; sid:903209925; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/715dd75b296c7dc50f702a0f224955077ea17b8a/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!