SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903210008Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 24, 2026
UpdatedJune 24, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"ea:fc:3f:83:c4:1b:3f:46:b7:57:4d:34:b9:81:2c:bb:35:be:da:3b"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/eafc3f83c41b3f46b7574d34b9812cbb35beda3b/; sid:903210008; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/eafc3f83c41b3f46b7574d34b9812cbb35beda3b/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!