SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903208992Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedFebruary 23, 2026
UpdatedFebruary 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"66:3e:bc:b2:15:f6:f4:2f:11:1c:0a:43:34:2e:e8:aa:6f:35:ee:7a"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/663ebcb215f6f42f111c0a43342ee8aa6f35ee7a/; sid:903208992; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/663ebcb215f6f42f111c0a43342ee8aa6f35ee7a/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!