SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209967Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedJune 22, 2026
UpdatedJune 22, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"74:c4:12:dd:b5:e5:ff:23:d5:19:ed:7f:6c:71:d9:9f:b8:ff:ba:ef"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/74c412ddb5e5ff23d519ed7f6c71d99fb8ffbaef/; sid:903209967; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/74c412ddb5e5ff23d519ed7f6c71d99fb8ffbaef/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!