SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210510Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedAugust 27, 2026
UpdatedAugust 27, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"8b:41:b8:74:1c:4d:2a:24:de:0a:ba:24:1f:74:2f:04:3f:10:14:d1"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/8b41b8741c4d2a24de0aba241f742f043f1014d1/; sid:903210510; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/8b41b8741c4d2a24de0aba241f742f043f1014d1/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!