SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903208112Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 25, 2025
UpdatedSeptember 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"d9:9d:16:df:2a:52:a6:78:5f:c1:76:e4:a6:03:8f:aa:62:a4:d2:de"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/d99d16df2a52a6785fc176e4a6038faa62a4d2de/; sid:903208112; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/d99d16df2a52a6785fc176e4a6038faa62a4d2de/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!