SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903208984Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedFebruary 23, 2026
UpdatedFebruary 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"68:2e:94:0f:82:ed:e5:86:15:0b:a3:d4:f2:99:5a:24:a4:a1:23:f2"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/682e940f82ede586150ba3d4f2995a24a4a123f2/; sid:903208984; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/682e940f82ede586150ba3d4f2995a24a4a123f2/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!