SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)
Sourceabuse.ch/sslbl-blacklist
CreatedNovember 12, 2025
UpdatedNovember 12, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"0c:3e:e8:18:8c:e3:5b:6b:b1:1d:5b:12:a0:e1:e2:83:10:18:8b:4e"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/0c3ee8188ce35b6bb11d5b12a0e1e28310188b4e/; sid:903208424; rev:1;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!