SSLBL: Malicious SSL certificate detected (KINS C&C)

SID: 903200099Rev: 135 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (KINS C&C)"; tls_cert_fingerprint; content:"03:1b:9a:b1:15:b9:23:06:f8:ab:ee:8f:bb:42:20:d2:86:cf:44:97"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/031b9ab115b92306f8abee8fbb4220d286cf4497/; sid:903200099; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/031b9ab115b92306f8abee8fbb4220d286cf4497/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!