SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209157Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedMarch 7, 2026
UpdatedMarch 7, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"b8:4f:36:72:05:c3:15:0a:29:70:71:20:bc:23:7a:51:61:d8:88:6e"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b84f367205c3150a29707120bc237a5161d8886e/; sid:903209157; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b84f367205c3150a29707120bc237a5161d8886e/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!