SSLBL: Malicious SSL certificate detected (Matanbuchus C&C)
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Matanbuchus C&C)"; tls_cert_fingerprint; content:"3d:12:35:2b:d1:e1:05:a7:10:cd:4e:0a:bc:14:49:31:7b:d8:f1:5c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/3d12352bd1e105a710cd4e0abc1449317bd8f15c/; sid:903204829; rev:1;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!