SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209639Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedMay 8, 2026
UpdatedMay 8, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"69:36:73:f3:11:28:d9:63:76:30:77:6f:29:89:b5:c2:9c:77:b0:4d"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/693673f31128d9637630776f2989b5c29c77b04d/; sid:903209639; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!