SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209415Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedApril 1, 2026
UpdatedApril 1, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"9e:f6:2e:16:01:14:c7:32:6b:22:73:8f:12:1e:1b:d0:85:a9:a9:02"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/9ef62e160114c7326b22738f121e1bd085a9a902/; sid:903209415; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/9ef62e160114c7326b22738f121e1bd085a9a902/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!