SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210886Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedOctober 11, 2026
UpdatedOctober 11, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"17:65:8c:94:79:40:ce:f2:20:93:81:bd:a1:59:a4:4a:8f:55:88:3c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/17658c947940cef2209381bda159a44a8f55883c/; sid:903210886; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/17658c947940cef2209381bda159a44a8f55883c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!