SSLBL: Malicious SSL certificate detected (BitRAT C&C)
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (BitRAT C&C)"; tls_cert_fingerprint; content:"77:9d:2a:15:02:e4:e7:0a:73:c4:d0:9c:92:50:31:dc:83:e3:5e:41"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/779d2a1502e4e70a73c4d09c925031dc83e35e41/; sid:903204675; rev:1;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!