SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210000Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 24, 2026
UpdatedJune 24, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"f6:4c:de:66:52:18:b5:b8:7c:a3:41:3a:06:88:64:24:7c:23:7b:95"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/f64cde665218b5b87ca3413a068864247c237b95/; sid:903210000; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/f64cde665218b5b87ca3413a068864247c237b95/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!