SSLBL: Malicious SSL certificate detected (KongTuke C&C)

SID: 903210088Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedJuly 8, 2026
UpdatedJuly 8, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (KongTuke C&C)"; tls_cert_fingerprint; content:"2d:83:74:9e:e7:93:d5:dd:90:5a:eb:ce:e1:0c:18:98:c7:ce:81:10"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2d83749ee793d5dd905aebcee10c1898c7ce8110/; sid:903210088; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2d83749ee793d5dd905aebcee10c1898c7ce8110/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!