SSLBL: Malicious SSL certificate detected (EternalRocks C&C)

SID: 903208953Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedFebruary 19, 2026
UpdatedFebruary 19, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (EternalRocks C&C)"; tls_cert_fingerprint; content:"cf:71:6c:b4:e1:1c:0b:7c:8b:7d:ed:a0:4d:b0:df:93:32:b5:a5:f9"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/cf716cb4e11c0b7c8b7deda04db0df9332b5a5f9/; sid:903208953; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/cf716cb4e11c0b7c8b7deda04db0df9332b5a5f9/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!