SSLBL: Malicious SSL certificate detected (ConnectWise C&C)

SID: 903209749Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedMay 26, 2026
UpdatedMay 26, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ConnectWise C&C)"; tls_cert_fingerprint; content:"26:aa:04:82:6a:71:52:f9:0e:6f:9c:8b:4b:18:62:7a:9a:11:78:cc"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/26aa04826a7152f90e6f9c8b4b18627a9a1178cc/; sid:903209749; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/26aa04826a7152f90e6f9c8b4b18627a9a1178cc/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!