SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209240Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedMarch 17, 2026
UpdatedMarch 17, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"4f:e4:c7:66:44:c5:24:e6:62:ba:08:36:4b:b0:40:57:75:ea:b3:74"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4fe4c76644c524e662ba08364bb0405775eab374/; sid:903209240; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!