SSLBL: Malicious SSL certificate detected (Gootkit C&C)

SID: 903201316Rev: 137 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Gootkit C&C)"; tls_cert_fingerprint; content:"69:fd:f0:ee:a2:40:52:98:66:78:d0:e8:49:de:27:92:05:b1:be:b6"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/69fdf0eea24052986678d0e849de279205b1beb6/; sid:903201316; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/69fdf0eea24052986678d0e849de279205b1beb6/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!