SSLBL: Malicious SSL certificate detected (Shylock C&C)

SID: 903201269Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Shylock C&C)"; tls_cert_fingerprint; content:"b1:1e:5d:b4:da:0a:1e:b4:19:ec:3d:14:44:3b:10:61:6d:aa:02:33"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b11e5db4da0a1eb419ec3d14443b10616daa0233/; sid:903201269; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b11e5db4da0a1eb419ec3d14443b10616daa0233/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!