SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903210568Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedSeptember 1, 2026
UpdatedSeptember 1, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"ca:b9:3f:3d:49:0e:d1:68:60:0f:08:e5:cc:4a:55:d4:e8:c5:03:c8"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/cab93f3d490ed168600f08e5cc4a55d4e8c503c8/; sid:903210568; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/cab93f3d490ed168600f08e5cc4a55d4e8c503c8/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!