SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208324Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedOctober 24, 2025
UpdatedOctober 24, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"03:68:fd:8a:57:0b:ef:53:6b:87:48:df:eb:b0:50:16:ef:36:34:ee"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/0368fd8a570bef536b8748dfebb05016ef3634ee/; sid:903208324; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/0368fd8a570bef536b8748dfebb05016ef3634ee/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!