SSLBL: Malicious SSL certificate detected (KongTuke C&C)

SID: 903209962Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedJune 19, 2026
UpdatedJune 19, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (KongTuke C&C)"; tls_cert_fingerprint; content:"01:dc:af:71:bc:0d:c8:21:c2:df:14:56:80:de:e0:55:78:36:83:55"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/01dcaf71bc0dc821c2df145680dee05578368355/; sid:903209962; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/01dcaf71bc0dc821c2df145680dee05578368355/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!