SSLBL: Malicious SSL certificate detected (Havoc C&C)

SID: 903207828Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Havoc C&C)"; tls_cert_fingerprint; content:"4c:2a:b1:e8:06:a0:19:37:dd:11:50:b3:a8:ec:e6:f2:fb:b4:66:5c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4c2ab1e806a01937dd1150b3a8ece6f2fbb4665c/; sid:903207828; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/4c2ab1e806a01937dd1150b3a8ece6f2fbb4665c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!