SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208611Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 18, 2025
UpdatedDecember 18, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"f2:12:cd:2c:48:d1:53:cd:ac:34:d1:2f:5f:1a:1e:5a:69:c4:d4:0c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/f212cd2c48d153cdac34d12f5f1a1e5a69c4d40c/; sid:903208611; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/f212cd2c48d153cdac34d12f5f1a1e5a69c4d40c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!