SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903207599Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"0b:f8:09:fd:4d:4b:a0:8c:29:ef:ba:4f:93:6b:8d:12:4a:5b:25:f6"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/0bf809fd4d4ba08c29efba4f936b8d124a5b25f6/; sid:903207599; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/0bf809fd4d4ba08c29efba4f936b8d124a5b25f6/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!