SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903208191Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedOctober 4, 2025
UpdatedOctober 4, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"1b:a0:c6:5f:c6:e2:51:25:14:aa:96:ed:7c:2c:4d:70:05:0f:3f:18"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/1ba0c65fc6e2512514aa96ed7c2c4d70050f3f18/; sid:903208191; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/1ba0c65fc6e2512514aa96ed7c2c4d70050f3f18/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!