SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208078Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 16, 2025
UpdatedSeptember 16, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"9f:48:03:38:a8:fe:92:c8:1a:98:be:d6:05:e5:35:9c:93:d9:a7:d2"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/9f480338a8fe92c81a98bed605e5359c93d9a7d2/; sid:903208078; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/9f480338a8fe92c81a98bed605e5359c93d9a7d2/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!