SSLBL: Malicious SSL certificate detected (Latrodectus C&C)

SID: 903208153Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 27, 2025
UpdatedSeptember 27, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Latrodectus C&C)"; tls_cert_fingerprint; content:"cf:fc:8d:ca:94:ee:81:cd:93:50:ff:c5:a7:05:a4:0d:cd:da:8e:f3"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/cffc8dca94ee81cd9350ffc5a705a40dcdda8ef3/; sid:903208153; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/cffc8dca94ee81cd9350ffc5a705a40dcdda8ef3/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!