SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210884Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedOctober 10, 2026
UpdatedOctober 10, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"36:44:a1:d1:9d:36:9a:66:e0:97:0e:e6:e9:97:73:6f:13:38:72:7f"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/3644a1d19d369a66e0970ee6e997736f1338727f/; sid:903210884; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/3644a1d19d369a66e0970ee6e997736f1338727f/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!