SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210543Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedAugust 30, 2026
UpdatedAugust 30, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"a7:fa:61:17:a3:81:35:c4:d9:c2:6e:c7:e3:7f:15:b3:61:53:5e:df"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/a7fa6117a38135c4d9c26ec7e37f15b361535edf/; sid:903210543; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/a7fa6117a38135c4d9c26ec7e37f15b361535edf/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!