SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903207911Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"3e:0c:20:01:e5:5f:a5:8c:27:ab:39:18:4e:84:7d:0f:15:b0:ee:d2"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/3e0c2001e55fa58c27ab39184e847d0f15b0eed2/; sid:903207911; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/3e0c2001e55fa58c27ab39184e847d0f15b0eed2/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!