SSLBL: Malicious SSL certificate detected (OffLoader C&C)

SID: 903209995Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 23, 2026
UpdatedJune 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OffLoader C&C)"; tls_cert_fingerprint; content:"dd:3b:a9:71:27:14:24:19:e8:0e:f9:ae:60:6b:ec:55:ca:85:00:fd"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/dd3ba97127142419e80ef9ae606bec55ca8500fd/; sid:903209995; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/dd3ba97127142419e80ef9ae606bec55ca8500fd/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!