SSLBL: Malicious SSL certificate detected (Quakbot C&C)

SID: 903201872Rev: 139 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Quakbot C&C)"; tls_cert_fingerprint; content:"56:2e:7f:2f:7b:3d:59:13:a6:ca:64:f2:58:54:d1:31:e5:6c:4f:f7"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/562e7f2f7b3d5913a6ca64f25854d131e56c4ff7/; sid:903201872; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/562e7f2f7b3d5913a6ca64f25854d131e56c4ff7/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!