SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903207388Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"f8:62:a8:95:b0:9d:d8:07:73:5e:e6:e8:37:bf:8d:d2:3d:8e:f0:33"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/f862a895b09dd807735ee6e837bf8dd23d8ef033/; sid:903207388; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/f862a895b09dd807735ee6e837bf8dd23d8ef033/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!