SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210063Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 6, 2026
UpdatedJuly 6, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"4e:11:bf:d5:4a:27:de:8b:33:38:b4:23:01:cc:df:02:a2:1d:92:a5"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4e11bfd54a27de8b3338b42301ccdf02a21d92a5/; sid:903210063; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/4e11bfd54a27de8b3338b42301ccdf02a21d92a5/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!