SSLBL: Malicious SSL certificate detected (SimpleHelp C&C)

SID: 903207826Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (SimpleHelp C&C)"; tls_cert_fingerprint; content:"8e:b7:ac:a7:27:d7:7e:18:9a:29:16:8d:7f:de:69:6b:0a:71:a4:b0"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/8eb7aca727d77e189a29168d7fde696b0a71a4b0/; sid:903207826; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!