SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903208748Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedJanuary 15, 2026
UpdatedJanuary 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"b2:2f:d2:67:ed:d1:1c:d7:30:bb:c1:27:94:10:3f:4f:4b:d1:c2:8d"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b22fd267edd11cd730bbc12794103f4f4bd1c28d/; sid:903208748; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b22fd267edd11cd730bbc12794103f4f4bd1c28d/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!