SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208835Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedFebruary 4, 2026
UpdatedFebruary 4, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"2c:a0:92:e8:6f:ab:38:94:1f:83:b4:d6:c1:38:dd:b3:47:0a:02:31"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2ca092e86fab38941f83b4d6c138ddb3470a0231/; sid:903208835; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2ca092e86fab38941f83b4d6c138ddb3470a0231/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!