SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903210162Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 15, 2026
UpdatedJuly 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"28:7c:68:8a:cd:02:bd:77:9c:63:15:ea:cc:15:e3:d2:51:45:b6:16"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/287c688acd02bd779c6315eacc15e3d25145b616/; sid:903210162; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/287c688acd02bd779c6315eacc15e3d25145b616/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!