SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903207848Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"6f:eb:ad:37:fa:fa:35:ee:66:6b:30:43:3a:31:74:b2:12:a0:17:13"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/6febad37fafa35ee666b30433a3174b212a01713/; sid:903207848; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/6febad37fafa35ee666b30433a3174b212a01713/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!