SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903208990Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedFebruary 23, 2026
UpdatedFebruary 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"b8:c3:f4:df:4b:4a:f6:93:9c:b9:0c:8f:4f:88:b8:06:f9:d7:83:5c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b8c3f4df4b4af6939cb90c8f4f88b806f9d7835c/; sid:903208990; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b8c3f4df4b4af6939cb90c8f4f88b806f9d7835c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!