SSLBL: Malicious SSL certificate detected (Gootkit C&C)

SID: 903201389Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Gootkit C&C)"; tls_cert_fingerprint; content:"7e:46:0f:1c:30:c6:84:34:2f:b8:f9:6e:45:47:f6:7b:1d:3a:ee:9e"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7e460f1c30c684342fb8f96e4547f67b1d3aee9e/; sid:903201389; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!