SSLBL: Malicious SSL certificate detected (IcedID C&C)

SID: 903203545Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (IcedID C&C)"; tls_cert_fingerprint; content:"ab:bc:90:75:2a:3d:95:3d:55:af:2f:9a:b9:2d:ec:cc:3d:12:8d:03"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/abbc90752a3d953d55af2f9ab92deccc3d128d03/; sid:903203545; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/abbc90752a3d953d55af2f9ab92deccc3d128d03/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!