SSLBL: Malicious SSL certificate detected (Gozi C&C)

SID: 903201233Rev: 136 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Gozi C&C)"; tls_cert_fingerprint; content:"5c:55:d2:f5:1c:af:87:1c:95:6a:13:7b:f6:1c:47:4a:14:be:a8:54"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/5c55d2f51caf871c956a137bf61c474a14bea854/; sid:903201233; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/5c55d2f51caf871c956a137bf61c474a14bea854/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!