SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209296Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedMarch 20, 2026
UpdatedMarch 20, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"23:d7:13:f7:91:be:d5:fd:a6:64:6d:19:5f:e7:40:2c:bb:5b:a9:5b"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/23d713f791bed5fda6646d195fe7402cbb5ba95b/; sid:903209296; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/23d713f791bed5fda6646d195fe7402cbb5ba95b/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!