SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208646Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 25, 2025
UpdatedDecember 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"4c:b2:61:4d:fe:cc:c2:7e:90:b4:0f:14:22:75:06:26:bb:f2:eb:3f"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4cb2614dfeccc27e90b40f1422750626bbf2eb3f/; sid:903208646; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/4cb2614dfeccc27e90b40f1422750626bbf2eb3f/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!