SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903208983Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedFebruary 23, 2026
UpdatedFebruary 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"aa:00:77:ef:50:1a:19:61:f4:15:01:e6:4c:b1:1a:90:94:1b:92:7a"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/aa0077ef501a1961f41501e64cb11a90941b927a/; sid:903208983; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/aa0077ef501a1961f41501e64cb11a90941b927a/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!