SSLBL: Malicious SSL certificate detected (Gozi C&C)

SID: 903202481Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Gozi C&C)"; tls_cert_fingerprint; content:"42:75:c1:28:8b:76:98:3c:d6:ec:48:b4:79:08:99:2f:13:41:63:54"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4275c1288b76983cd6ec48b47908992f13416354/; sid:903202481; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/4275c1288b76983cd6ec48b47908992f13416354/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!