SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903209008Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedFebruary 23, 2026
UpdatedFebruary 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"6d:aa:ae:05:52:ed:50:67:a6:b2:e1:5b:06:b1:0c:de:6f:3a:7c:8c"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/6daaae0552ed5067a6b2e15b06b10cde6f3a7c8c/; sid:903209008; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/6daaae0552ed5067a6b2e15b06b10cde6f3a7c8c/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!