SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209134Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedMarch 5, 2026
UpdatedMarch 5, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"b2:42:cf:8e:06:28:b8:a1:80:4d:04:39:9e:91:70:fb:5c:a8:6d:64"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b242cf8e0628b8a1804d04399e9170fb5ca86d64/; sid:903209134; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b242cf8e0628b8a1804d04399e9170fb5ca86d64/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!