SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903210003Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 24, 2026
UpdatedJune 24, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"9f:4f:d4:c3:e2:d2:89:a3:6b:08:eb:04:f9:2c:ad:1f:ca:6d:52:37"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/9f4fd4c3e2d289a36b08eb04f92cad1fca6d5237/; sid:903210003; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/9f4fd4c3e2d289a36b08eb04f92cad1fca6d5237/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!