SSLBL: Malicious SSL certificate detected (KongTuke C&C)

SID: 903210086Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 7, 2026
UpdatedJuly 7, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (KongTuke C&C)"; tls_cert_fingerprint; content:"40:08:66:db:d7:d2:f5:1f:ba:b5:f7:f7:3e:98:f6:0d:f8:e0:d7:98"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/400866dbd7d2f51fbab5f7f73e98f60df8e0d798/; sid:903210086; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/400866dbd7d2f51fbab5f7f73e98f60df8e0d798/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!