SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210903Rev: 1EnabledDerived4 views
History
Filesslblacklist_tls_cert.rules
CreatedOctober 12, 2026
UpdatedOctober 21, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"51:55:74:d4:dc:49:57:fb:d0:04:3d:3a:42:69:48:53:84:e5:04:e7"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/515574d4dc4957fbd0043d3a4269485384e504e7/; sid:903210903; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/515574d4dc4957fbd0043d3a4269485384e504e7/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!