SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903207918Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"d2:f5:1b:35:d5:71:40:d6:90:a4:25:c2:ba:70:e5:ef:2a:5e:bf:ea"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/d2f51b35d57140d690a425c2ba70e5ef2a5ebfea/; sid:903207918; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/d2f51b35d57140d690a425c2ba70e5ef2a5ebfea/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!