SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210046Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 2, 2026
UpdatedJuly 2, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"e0:47:a0:ee:fd:db:59:4a:f7:9b:ff:f2:2f:28:a7:14:87:29:b0:07"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/e047a0eefddb594af79bfff22f28a7148729b007/; sid:903210046; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/e047a0eefddb594af79bfff22f28a7148729b007/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!