SSLBL: Malicious SSL certificate detected (CoinMiner C&C)
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (CoinMiner C&C)"; tls_cert_fingerprint; content:"35:3f:04:05:65:bf:a1:b6:79:5a:c8:75:aa:dd:eb:44:83:df:21:44"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/353f040565bfa1b6795ac875aaddeb4483df2144/; sid:903207610; rev:1;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!