SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209659Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedMay 17, 2026
UpdatedMay 17, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"97:13:33:b6:6a:82:66:c1:bf:37:ab:a6:86:b9:b8:9f:cd:9a:9e:44"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/971333b66a8266c1bf37aba686b9b89fcd9a9e44/; sid:903209659; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/971333b66a8266c1bf37aba686b9b89fcd9a9e44/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!