SSLBL: Malicious SSL certificate detected (Retefe C&C)

SID: 903200136Rev: 135 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Retefe C&C)"; tls_cert_fingerprint; content:"85:a8:d8:0b:16:83:29:3a:8d:3a:24:94:e0:45:e1:e4:44:f5:ed:d3"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/85a8d80b1683293a8d3a2494e045e1e444f5edd3/; sid:903200136; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/85a8d80b1683293a8d3a2494e045e1e444f5edd3/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!