SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209581Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedApril 20, 2026
UpdatedApril 20, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"d7:a0:0e:f8:7e:9d:79:7b:bf:65:c0:a8:3a:fb:41:50:72:69:a4:08"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/d7a00ef87e9d797bbf65c0a83afb41507269a408/; sid:903209581; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/d7a00ef87e9d797bbf65c0a83afb41507269a408/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!