SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210075Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 6, 2026
UpdatedJuly 6, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"ec:45:2c:3c:30:49:9a:1a:69:83:87:7a:2d:88:1c:1a:8f:29:55:ea"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ec452c3c30499a1a6983877a2d881c1a8f2955ea/; sid:903210075; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/ec452c3c30499a1a6983877a2d881c1a8f2955ea/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!