SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903206577Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"00:b9:46:af:68:7e:48:7e:80:f5:b1:68:9f:70:35:16:03:6a:04:f1"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/00b946af687e487e80f5b1689f703516036a04f1/; sid:903206577; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/00b946af687e487e80f5b1689f703516036a04f1/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!