SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903210531Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedAugust 28, 2026
UpdatedAugust 28, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"41:f8:e8:1a:4f:9b:3e:7e:70:35:3a:84:e4:bf:87:d6:87:dd:c7:9e"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/41f8e81a4f9b3e7e70353a84e4bf87d687ddc79e/; sid:903210531; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/41f8e81a4f9b3e7e70353a84e4bf87d687ddc79e/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!