SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903210013Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 24, 2026
UpdatedJune 24, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"cd:23:e9:07:86:70:a3:93:e6:3d:54:da:8b:3d:57:0c:f2:63:3f:82"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/cd23e9078670a393e63d54da8b3d570cf2633f82/; sid:903210013; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/cd23e9078670a393e63d54da8b3d570cf2633f82/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!