SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903207959Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"2e:09:36:c6:6a:4c:7b:0c:8f:c7:8f:12:53:3e:28:5c:e0:2b:45:19"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2e0936c66a4c7b0c8fc78f12533e285ce02b4519/; sid:903207959; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2e0936c66a4c7b0c8fc78f12533e285ce02b4519/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!