SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209563Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedApril 16, 2026
UpdatedApril 16, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"c1:29:8a:44:47:ff:2d:5d:c3:b1:3b:39:25:7a:66:b5:2e:17:8f:77"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/c1298a4447ff2d5dc3b13b39257a66b52e178f77/; sid:903209563; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/c1298a4447ff2d5dc3b13b39257a66b52e178f77/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!