SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903207877Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"7e:16:16:15:5c:8c:8f:df:42:d7:6e:3c:78:cc:b5:85:ff:dd:4c:68"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7e1616155c8c8fdf42d76e3c78ccb585ffdd4c68/; sid:903207877; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/7e1616155c8c8fdf42d76e3c78ccb585ffdd4c68/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!