SSLBL: Malicious SSL certificate detected (OffLoader C&C)
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OffLoader C&C)" ; tls_cert_fingerprint; content:"a8:38:f2:1e:4f:bc:f9:3b:9d:cb:1a:df:61:ce:9a:7e:07:72:95:94" ; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/a838f21e4fbcf93b9dcb1adf61ce9a7e07729594/ ; sid:903210083; rev:1;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!