SSLBL: Malicious SSL certificate detected (OffLoader C&C)

SID: 903209970Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJune 22, 2026
UpdatedJune 22, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OffLoader C&C)"; tls_cert_fingerprint; content:"db:6d:c9:a3:7d:3f:46:e4:38:d4:02:85:25:5b:9d:19:4a:a6:f9:3b"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/db6dc9a37d3f46e438d40285255b9d194aa6f93b/; sid:903209970; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!