SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208620Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedDecember 19, 2025
UpdatedDecember 19, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"8a:54:2e:01:51:17:f2:25:4f:09:8c:ce:2b:47:1b:59:2d:4f:56:e8"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/8a542e015117f2254f098cce2b471b592d4f56e8/; sid:903208620; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/8a542e015117f2254f098cce2b471b592d4f56e8/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!