SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903208344Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedOctober 26, 2025
UpdatedOctober 26, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"a3:e1:86:af:f9:11:fd:71:a8:90:4a:4b:de:4e:6f:81:c0:e0:83:3c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/a3e186aff911fd71a8904a4bde4e6f81c0e0833c/; sid:903208344; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/a3e186aff911fd71a8904a4bde4e6f81c0e0833c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!