SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903206584Rev: 143 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"36:72:8a:77:8d:b4:54:30:49:0f:c8:cf:dc:52:37:7f:fa:14:e9:16"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/36728a778db45430490fc8cfdc52377ffa14e916/; sid:903206584; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/36728a778db45430490fc8cfdc52377ffa14e916/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!