SSLBL: Malicious SSL certificate detected (OffLoader C&C)

SID: 903208456Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedNovember 16, 2025
UpdatedNovember 16, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OffLoader C&C)"; tls_cert_fingerprint; content:"94:af:5e:87:ee:41:5d:d4:a0:78:df:6e:b2:3b:4c:27:0d:d1:c6:76"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/94af5e87ee415dd4a078df6eb23b4c270dd1c676/; sid:903208456; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/94af5e87ee415dd4a078df6eb23b4c270dd1c676/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!