SSLBL: Malicious SSL certificate detected (CobaltStrike C&C)

SID: 903208384Rev: 13 views
Sourceabuse.ch/sslbl-blacklist
CreatedNovember 3, 2025
UpdatedNovember 3, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (CobaltStrike C&C)"; tls_cert_fingerprint; content:"27:8c:02:bb:22:57:48:38:e4:11:e4:61:ef:2f:87:b2:7d:c3:63:1a"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/278c02bb22574838e411e461ef2f87b27dc3631a/; sid:903208384; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/278c02bb22574838e411e461ef2f87b27dc3631a/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!