SSLBL: Malicious SSL certificate detected (OffLoader C&C)

SID: 903209937Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 16, 2026
UpdatedJune 16, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OffLoader C&C)"; tls_cert_fingerprint; content:"8f:15:e3:e0:7c:69:1a:e4:93:b4:05:92:22:63:80:03:e0:bf:0a:9b"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/8f15e3e07c691ae493b4059222638003e0bf0a9b/; sid:903209937; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!