SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903207858Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"2e:c7:0a:1a:f7:b6:5d:07:3b:c6:f6:bf:3d:d1:4d:26:5a:1e:05:61"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2ec70a1af7b65d073bc6f6bf3dd14d265a1e0561/; sid:903207858; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2ec70a1af7b65d073bc6f6bf3dd14d265a1e0561/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!