SSLBL: Malicious SSL certificate detected (Quakbot C&C)

SID: 903201409Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Quakbot C&C)"; tls_cert_fingerprint; content:"c0:9d:8b:14:f1:92:fc:4e:c9:1c:e9:4a:ff:7c:1d:52:f8:1f:a5:55"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/c09d8b14f192fc4ec91ce94aff7c1d52f81fa555/; sid:903201409; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/c09d8b14f192fc4ec91ce94aff7c1d52f81fa555/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!