SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903208968Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedFebruary 23, 2026
UpdatedFebruary 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"56:fc:aa:9f:ad:8c:9b:2d:c8:49:af:c5:b7:0c:2b:61:61:ae:18:a7"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/56fcaa9fad8c9b2dc849afc5b70c2b6161ae18a7/; sid:903208968; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/56fcaa9fad8c9b2dc849afc5b70c2b6161ae18a7/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!