SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208569Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 10, 2025
UpdatedDecember 10, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"ec:60:31:f6:3b:65:51:e1:0f:61:27:67:81:c3:25:e6:02:8c:b1:bf"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ec6031f63b6551e10f61276781c325e6028cb1bf/; sid:903208569; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/ec6031f63b6551e10f61276781c325e6028cb1bf/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!