SSLBL: Malicious SSL certificate detected (Plugx C&C)

SID: 903207672Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Plugx C&C)"; tls_cert_fingerprint; content:"6d:d9:c3:93:12:55:15:b1:e4:ad:3f:b8:e6:74:a2:8a:f1:2d:c8:d7"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/6dd9c393125515b1e4ad3fb8e674a28af12dc8d7/; sid:903207672; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/6dd9c393125515b1e4ad3fb8e674a28af12dc8d7/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!