SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210547Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedAugust 31, 2026
UpdatedAugust 31, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"fb:a4:40:8c:d5:4a:bb:e1:ba:49:11:7c:ea:b8:a9:03:35:b0:32:17"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/fba4408cd54abbe1ba49117ceab8a90335b03217/; sid:903210547; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/fba4408cd54abbe1ba49117ceab8a90335b03217/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!