SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208737Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedJanuary 13, 2026
UpdatedJanuary 13, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"15:64:0a:b7:8d:74:43:1d:16:43:b4:eb:62:ae:3d:91:53:66:6a:e8"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/15640ab78d74431d1643b4eb62ae3d9153666ae8/; sid:903208737; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/15640ab78d74431d1643b4eb62ae3d9153666ae8/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!