SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903208184Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedOctober 1, 2025
UpdatedOctober 1, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"66:38:0f:a2:18:54:88:97:9d:de:e0:47:db:6c:81:d0:c6:0b:7a:a0"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/66380fa2185488979ddee047db6c81d0c60b7aa0/; sid:903208184; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/66380fa2185488979ddee047db6c81d0c60b7aa0/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!