SSLBL: Malicious SSL certificate detected (Vidar C&C)
Sourcesslbl/ssl-fp-blacklist
CreatedJanuary 21, 2026
UpdatedJanuary 21, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"76:6d:70:a8:be:35:c0:1b:55:e0:56:b9:4d:95:f0:91:b9:84:3c:14"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/766d70a8be35c01b55e056b94d95f091b9843c14/; sid:903208774; rev:1;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!