SSLBL: Malicious SSL certificate detected (KongTuke C&C)

SID: 903210154Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJuly 14, 2026
UpdatedJuly 14, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (KongTuke C&C)"; tls_cert_fingerprint; content:"ca:34:54:95:52:72:55:68:13:ca:9b:e9:95:4e:72:0f:a6:b6:79:6a"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ca3454955272556813ca9be9954e720fa6b6796a/; sid:903210154; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/ca3454955272556813ca9be9954e720fa6b6796a/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!