SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903208224Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedOctober 10, 2025
UpdatedOctober 10, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"44:04:63:6b:71:a3:f6:e9:2a:54:42:62:07:98:30:01:f2:8c:53:48"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4404636b71a3f6e92a54426207983001f28c5348/; sid:903208224; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/4404636b71a3f6e92a54426207983001f28c5348/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!