SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903207923Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"44:65:bc:37:2b:7d:51:88:4d:dd:20:c4:81:a9:82:3e:59:9c:6a:24"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4465bc372b7d51884ddd20c481a9823e599c6a24/; sid:903207923; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/4465bc372b7d51884ddd20c481a9823e599c6a24/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!