SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209205Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedMarch 14, 2026
UpdatedMarch 14, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"40:5f:a9:79:b8:1c:50:12:43:21:3a:1f:a1:53:5c:12:95:a7:b0:fa"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/405fa979b81c501243213a1fa1535c1295a7b0fa/; sid:903209205; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/405fa979b81c501243213a1fa1535c1295a7b0fa/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!