SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208564Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 10, 2025
UpdatedDecember 10, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"1f:12:6f:f0:05:6b:82:44:12:59:c5:c2:eb:15:66:a1:d1:2c:fe:5b"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/1f126ff0056b82441259c5c2eb1566a1d12cfe5b/; sid:903208564; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/1f126ff0056b82441259c5c2eb1566a1d12cfe5b/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!