SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903205942Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"5f:6f:68:24:2f:ba:36:2e:87:77:4c:6d:30:ce:b5:ce:a5:00:6c:25"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/5f6f68242fba362e87774c6d30ceb5cea5006c25/; sid:903205942; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/5f6f68242fba362e87774c6d30ceb5cea5006c25/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!