SSLBL: Malicious SSL certificate detected (PureHVNC C&C)

SID: 903210020Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 24, 2026
UpdatedJune 24, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureHVNC C&C)"; tls_cert_fingerprint; content:"32:4e:2f:b8:e2:ce:f0:b9:cc:4e:d1:08:f7:9f:60:06:cc:e4:ce:34"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/324e2fb8e2cef0b9cc4ed108f79f6006cce4ce34/; sid:903210020; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/324e2fb8e2cef0b9cc4ed108f79f6006cce4ce34/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!