SSLBL: Malicious SSL certificate detected (BitRAT C&C)

SID: 903203725Rev: 142 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (BitRAT C&C)"; tls_cert_fingerprint; content:"da:f1:bf:d2:5c:fb:24:e7:ab:bb:ee:90:99:1a:cc:20:c9:7f:a2:48"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/daf1bfd25cfb24e7abbbee90991acc20c97fa248/; sid:903203725; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/daf1bfd25cfb24e7abbbee90991acc20c97fa248/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!