SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208801Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedJanuary 30, 2026
UpdatedJanuary 30, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"0f:ff:d3:c4:d6:7d:04:77:01:3f:86:eb:09:64:12:71:fb:ba:d2:c8"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/0fffd3c4d67d0477013f86eb09641271fbbad2c8/; sid:903208801; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/0fffd3c4d67d0477013f86eb09641271fbbad2c8/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!