SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903207850Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"cd:4e:09:1c:f6:27:48:c0:fb:a2:ca:29:06:0c:1d:8c:bc:38:ee:b3"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/cd4e091cf62748c0fba2ca29060c1d8cbc38eeb3/; sid:903207850; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/cd4e091cf62748c0fba2ca29060c1d8cbc38eeb3/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!