SSLBL: Malicious SSL certificate detected (ArkeiStealer C&C)

SID: 903210100Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJuly 9, 2026
UpdatedJuly 9, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ArkeiStealer C&C)"; tls_cert_fingerprint; content:"d0:5f:2a:01:d4:f4:2a:83:73:c7:07:d3:62:2f:b4:47:e5:ae:da:86"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/d05f2a01d4f42a8373c707d3622fb447e5aeda86/; sid:903210100; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/d05f2a01d4f42a8373c707d3622fb447e5aeda86/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!