SSLBL: Malicious SSL certificate detected (Dridex C&C)

SID: 903200565Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Dridex C&C)"; tls_cert_fingerprint; content:"eb:f5:c5:c6:13:40:0d:9b:16:8b:71:13:95:e8:c5:a6:a1:64:7e:6a"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ebf5c5c613400d9b168b711395e8c5a6a1647e6a/; sid:903200565; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!