SSLBL: Malicious SSL certificate detected (CountLoader C&C)

SID: 903209061Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedFebruary 26, 2026
UpdatedFebruary 26, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (CountLoader C&C)"; tls_cert_fingerprint; content:"56:b8:6a:cc:d4:68:07:ab:c8:47:38:9f:1f:cc:4c:73:ef:62:98:41"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/56b86accd46807abc847389f1fcc4c73ef629841/; sid:903209061; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/56b86accd46807abc847389f1fcc4c73ef629841/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!