SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210558Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedAugust 31, 2026
UpdatedAugust 31, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"ed:31:2f:7a:d5:8a:9f:ae:c6:d3:c9:3a:ab:f5:98:33:5f:df:49:4c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ed312f7ad58a9faec6d3c93aabf598335fdf494c/; sid:903210558; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/ed312f7ad58a9faec6d3c93aabf598335fdf494c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!