SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903209693Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedMay 21, 2026
UpdatedMay 21, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"47:dc:97:dd:3c:00:01:f9:0d:fe:09:c8:93:9d:c2:26:fe:c0:62:9b"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/47dc97dd3c0001f90dfe09c8939dc226fec0629b/; sid:903209693; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/47dc97dd3c0001f90dfe09c8939dc226fec0629b/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!