SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903208917Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedFebruary 12, 2026
UpdatedFebruary 12, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"c9:9d:d9:17:e7:a0:1d:0c:7f:db:c8:ed:f8:fe:14:b6:a4:67:3b:f8"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/c99dd917e7a01d0c7fdbc8edf8fe14b6a4673bf8/; sid:903208917; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/c99dd917e7a01d0c7fdbc8edf8fe14b6a4673bf8/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!