SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903207320Rev: 11 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"c6:2a:d8:c3:f5:b8:b2:70:af:cb:22:de:27:b2:29:d6:57:28:0c:a5"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/c62ad8c3f5b8b270afcb22de27b229d657280ca5/; sid:903207320; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/c62ad8c3f5b8b270afcb22de27b229d657280ca5/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!