SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903206624Rev: 146 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"2e:78:45:bf:33:21:c3:e0:9a:c0:c5:78:7a:4c:9b:f2:5e:95:92:32"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2e7845bf3321c3e09ac0c5787a4c9bf25e959232/; sid:903206624; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2e7845bf3321c3e09ac0c5787a4c9bf25e959232/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!