SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210561Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedSeptember 1, 2026
UpdatedSeptember 1, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"4b:f1:8c:b5:0c:b5:bc:a4:6a:ff:57:85:c1:ba:96:a2:48:d1:e9:fd"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4bf18cb50cb5bca46aff5785c1ba96a248d1e9fd/; sid:903210561; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/4bf18cb50cb5bca46aff5785c1ba96a248d1e9fd/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!