SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210125Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 12, 2026
UpdatedJuly 12, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"7a:8f:36:1d:18:8e:55:26:51:fe:a1:20:4d:53:99:d8:89:31:2d:a2"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7a8f361d188e552651fea1204d5399d889312da2/; sid:903210125; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/7a8f361d188e552651fea1204d5399d889312da2/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!