SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903207689Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"48:13:41:6e:28:72:43:8b:99:9e:4c:00:2f:cb:3f:ee:f0:a8:af:f8"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4813416e2872438b999e4c002fcb3feef0a8aff8/; sid:903207689; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/4813416e2872438b999e4c002fcb3feef0a8aff8/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!