SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208743Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedJanuary 15, 2026
UpdatedJanuary 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"50:0f:81:d9:d7:ba:57:ed:3a:bd:26:c5:a5:2d:f3:0d:06:1b:a6:07"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/500f81d9d7ba57ed3abd26c5a52df30d061ba607/; sid:903208743; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!