SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209582Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedApril 20, 2026
UpdatedApril 20, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"7d:8a:38:a6:6d:3c:ba:45:92:a7:c5:d2:f5:0a:9a:a2:d0:a4:d5:62"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7d8a38a66d3cba4592a7c5d2f50a9aa2d0a4d562/; sid:903209582; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!