SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903208979Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedFebruary 23, 2026
UpdatedFebruary 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"0f:d6:01:65:1a:c2:f1:6d:e0:cd:53:8b:34:3f:5b:34:a3:2c:94:06"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/0fd601651ac2f16de0cd538b343f5b34a32c9406/; sid:903208979; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/0fd601651ac2f16de0cd538b343f5b34a32c9406/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!