SSLBL: Malicious SSL certificate detected (RatonRAT C&C)

SID: 903209499Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedApril 12, 2026
UpdatedApril 12, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (RatonRAT C&C)"; tls_cert_fingerprint; content:"c9:54:e8:cb:b2:12:5a:c0:20:e4:13:5d:b5:0b:69:d0:67:5f:6c:d1"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/c954e8cbb2125ac020e4135db50b69d0675f6cd1/; sid:903209499; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!