SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208486Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedNovember 30, 2025
UpdatedNovember 30, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"2b:ec:8c:70:e9:52:95:eb:0f:c6:cb:9a:b8:32:81:97:20:20:70:e6"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2bec8c70e95295eb0fc6cb9ab8328197202070e6/; sid:903208486; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2bec8c70e95295eb0fc6cb9ab8328197202070e6/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!