SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209073Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedFebruary 28, 2026
UpdatedFebruary 28, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"f1:bc:12:95:c4:41:90:ef:d7:3c:cd:02:bf:1a:14:1c:6d:73:41:03"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/f1bc1295c44190efd73ccd02bf1a141c6d734103/; sid:903209073; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/f1bc1295c44190efd73ccd02bf1a141c6d734103/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!