SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903208644Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedDecember 25, 2025
UpdatedDecember 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"26:3b:a9:c3:bd:eb:2b:09:c8:10:89:13:06:0a:35:53:61:a1:42:4c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/263ba9c3bdeb2b09c8108913060a355361a1424c/; sid:903208644; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/263ba9c3bdeb2b09c8108913060a355361a1424c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!