SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903210161Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 15, 2026
UpdatedJuly 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"a0:cd:40:a5:89:57:3d:51:5f:b3:d7:c3:0d:6d:e0:d4:5d:40:a4:fa"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/a0cd40a589573d515fb3d7c30d6de0d45d40a4fa/; sid:903210161; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/a0cd40a589573d515fb3d7c30d6de0d45d40a4fa/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!