SSLBL: Malicious SSL certificate detected (Ostap C&C)

SID: 903202910Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Ostap C&C)"; tls_cert_fingerprint; content:"93:45:1c:ec:2f:b6:85:3f:bd:6f:b5:05:3b:ae:74:71:62:e0:fe:af"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/93451cec2fb6853fbd6fb5053bae747162e0feaf/; sid:903202910; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/93451cec2fb6853fbd6fb5053bae747162e0feaf/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!