SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208582Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 12, 2025
UpdatedDecember 12, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"40:64:1f:f7:7a:e7:b5:8d:5b:43:56:64:d7:b4:73:99:73:0b:f4:a0"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/40641ff77ae7b58d5b435664d7b47399730bf4a0/; sid:903208582; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/40641ff77ae7b58d5b435664d7b47399730bf4a0/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!