SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208574Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedDecember 11, 2025
UpdatedDecember 11, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"b4:7f:d3:a2:62:d3:0f:4f:26:cf:6e:d7:69:23:3f:ae:1b:12:64:d5"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b47fd3a262d30f4f26cf6ed769233fae1b1264d5/; sid:903208574; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b47fd3a262d30f4f26cf6ed769233fae1b1264d5/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!