SSLBL: Malicious SSL certificate detected (LummaStealer C&C)

SID: 903207562Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (LummaStealer C&C)"; tls_cert_fingerprint; content:"da:9e:e0:e5:5a:df:15:af:f9:c9:d2:58:1c:ba:d9:c4:da:a1:23:94"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/da9ee0e55adf15aff9c9d2581cbad9c4daa12394/; sid:903207562; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/da9ee0e55adf15aff9c9d2581cbad9c4daa12394/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!