SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903210001Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJune 24, 2026
UpdatedJune 24, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"d3:96:ef:23:2a:a8:0c:61:25:67:93:21:62:00:a7:33:61:54:8c:09"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/d396ef232aa80c61256793216200a73361548c09/; sid:903210001; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/d396ef232aa80c61256793216200a73361548c09/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!