SSLBL: Malicious SSL certificate detected (Amadey C&C)

SID: 903209931Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 15, 2026
UpdatedJune 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Amadey C&C)"; tls_cert_fingerprint; content:"b6:f6:2f:51:d7:51:b5:64:30:4a:7d:fd:dc:1e:ef:a2:1a:f8:74:59"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b6f62f51d751b564304a7dfddc1eefa21af87459/; sid:903209931; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!