SSLBL: Malicious SSL certificate detected (OffLoader C&C)

SID: 903210083Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 7, 2026
UpdatedJuly 7, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OffLoader C&C)"; tls_cert_fingerprint; content:"a8:38:f2:1e:4f:bc:f9:3b:9d:cb:1a:df:61:ce:9a:7e:07:72:95:94"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/a838f21e4fbcf93b9dcb1adf61ce9a7e07729594/; sid:903210083; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!