SSLBL: Malicious SSL certificate detected (OffLoader C&C)

SID: 903210500Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedAugust 26, 2026
UpdatedAugust 26, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OffLoader C&C)"; tls_cert_fingerprint; content:"aa:f3:1b:3f:7a:cf:e6:dc:85:9d:1b:62:69:c7:e1:73:37:a6:1f:d7"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/aaf31b3f7acfe6dc859d1b6269c7e17337a61fd7/; sid:903210500; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/aaf31b3f7acfe6dc859d1b6269c7e17337a61fd7/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!