SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209414Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedApril 1, 2026
UpdatedApril 1, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"97:49:6b:1b:e7:3f:34:73:39:8e:19:5f:e7:56:38:6f:ba:81:95:ba"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/97496b1be73f3473398e195fe756386fba8195ba/; sid:903209414; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/97496b1be73f3473398e195fe756386fba8195ba/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!