SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903208381Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedNovember 3, 2025
UpdatedNovember 3, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"6a:f7:79:a8:20:e7:40:d4:ac:3e:9b:a6:60:08:14:0e:aa:29:ff:95"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/6af779a820e740d4ac3e9ba66008140eaa29ff95/; sid:903208381; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/6af779a820e740d4ac3e9ba66008140eaa29ff95/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!