SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903208967Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedFebruary 23, 2026
UpdatedFebruary 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"ca:41:57:0b:23:0a:b2:df:55:3f:c3:cf:f4:55:60:29:3f:99:b9:57"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ca41570b230ab2df553fc3cff45560293f99b957/; sid:903208967; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/ca41570b230ab2df553fc3cff45560293f99b957/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!