SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903208427Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedNovember 13, 2025
UpdatedNovember 13, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"2f:35:53:66:68:ad:1d:a6:e2:3c:b6:da:32:d9:02:eb:16:d0:ed:47"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2f35536668ad1da6e23cb6da32d902eb16d0ed47/; sid:903208427; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2f35536668ad1da6e23cb6da32d902eb16d0ed47/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!