SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208526Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedDecember 4, 2025
UpdatedDecember 4, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"dc:01:13:fb:2c:5c:3b:cd:8d:ca:d8:30:80:86:1e:aa:9e:9b:41:56"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/dc0113fb2c5c3bcd8dcad83080861eaa9e9b4156/; sid:903208526; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/dc0113fb2c5c3bcd8dcad83080861eaa9e9b4156/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!