SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903207254Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"2d:44:6a:92:13:72:40:60:61:e2:0f:be:16:13:0a:1e:54:43:38:e5"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2d446a921372406061e20fbe16130a1e544338e5/; sid:903207254; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2d446a921372406061e20fbe16130a1e544338e5/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!