SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903208013Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"7f:b4:7e:7c:39:7c:60:b9:2a:5c:3d:f3:7c:53:9e:c8:fe:fe:0c:c6"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7fb47e7c397c60b92a5c3df37c539ec8fefe0cc6/; sid:903208013; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/7fb47e7c397c60b92a5c3df37c539ec8fefe0cc6/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!