SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903210468Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedAugust 21, 2026
UpdatedAugust 21, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"b9:4e:b3:bc:d4:a5:74:42:c3:0e:14:dd:20:67:b0:c6:c4:6d:96:19"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b94eb3bcd4a57442c30e14dd2067b0c6c46d9619/; sid:903210468; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b94eb3bcd4a57442c30e14dd2067b0c6c46d9619/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!