SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209926Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJune 15, 2026
UpdatedJune 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"fa:d1:aa:4c:3f:36:fa:b0:33:51:08:dd:c9:37:72:f1:07:58:e7:80"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/fad1aa4c3f36fab0335108ddc93772f10758e780/; sid:903209926; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/fad1aa4c3f36fab0335108ddc93772f10758e780/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!