SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)
Sourcesslbl/ssl-fp-blacklist
CreatedOctober 20, 2025
UpdatedOctober 20, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"7f:9d:23:c2:50:fa:1f:0e:72:c4:6b:c3:30:c0:19:2b:c9:bc:51:c5"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7f9d23c250fa1f0e72c46bc330c0192bc9bc51c5/; sid:903208275; rev:1;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!