SSLBL: Malicious SSL certificate detected (Adwind C&C)

SID: 903203138Rev: 137 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Adwind C&C)"; tls_cert_fingerprint; content:"9c:f4:86:c4:e0:96:6c:63:68:55:8b:8a:1f:dd:b6:9d:ea:27:da:f4"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/9cf486c4e0966c6368558b8a1fddb69dea27daf4/; sid:903203138; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/9cf486c4e0966c6368558b8a1fddb69dea27daf4/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!