SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208751Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedJanuary 15, 2026
UpdatedJanuary 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"42:42:3e:12:9f:91:f6:f0:29:c6:cd:69:15:09:a1:50:59:68:95:0a"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/42423e129f91f6f029c6cd691509a1505968950a/; sid:903208751; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/42423e129f91f6f029c6cd691509a1505968950a/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!