SSLBL: Malicious SSL certificate detected (Shifu C&C)

SID: 903200827Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Shifu C&C)"; tls_cert_fingerprint; content:"b8:21:b9:9a:94:5a:8a:b0:5a:85:18:c4:c1:ec:2f:45:f1:ed:60:65"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b821b99a945a8ab05a8518c4c1ec2f45f1ed6065/; sid:903200827; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b821b99a945a8ab05a8518c4c1ec2f45f1ed6065/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!