SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208712Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedJanuary 9, 2026
UpdatedJanuary 9, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"5b:7a:ed:7f:e7:54:3e:42:29:75:5f:24:50:29:72:3c:07:8b:df:64"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/5b7aed7fe7543e4229755f245029723c078bdf64/; sid:903208712; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/5b7aed7fe7543e4229755f245029723c078bdf64/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!