SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208647Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 25, 2025
UpdatedDecember 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"15:65:78:68:96:62:f3:a0:d7:1a:36:35:2f:92:c4:2f:87:a8:eb:90"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/156578689662f3a0d71a36352f92c42f87a8eb90/; sid:903208647; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/156578689662f3a0d71a36352f92c42f87a8eb90/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!