SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903208598Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 15, 2025
UpdatedDecember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"34:d7:f0:89:68:4e:e3:ab:9f:af:20:4b:7d:0a:3a:6d:88:82:64:97"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/34d7f089684ee3ab9faf204b7d0a3a6d88826497/; sid:903208598; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/34d7f089684ee3ab9faf204b7d0a3a6d88826497/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!