SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210045Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 2, 2026
UpdatedJuly 2, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"02:27:05:f7:93:dd:54:eb:9a:a5:c4:b1:e1:d5:71:7c:8a:6d:18:31"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/022705f793dd54eb9aa5c4b1e1d5717c8a6d1831/; sid:903210045; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/022705f793dd54eb9aa5c4b1e1d5717c8a6d1831/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!