SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208790Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedJanuary 30, 2026
UpdatedJanuary 30, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"1b:43:d7:40:22:9e:23:28:ee:c7:cc:89:e6:c2:02:1f:45:60:8c:4a"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/1b43d740229e2328eec7cc89e6c2021f45608c4a/; sid:903208790; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/1b43d740229e2328eec7cc89e6c2021f45608c4a/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!