SSLBL: Malicious SSL certificate detected (DeerStealer C&C)

SID: 903208483Rev: 11 views
Sourceabuse.ch/sslbl-blacklist
CreatedNovember 23, 2025
UpdatedNovember 23, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DeerStealer C&C)"; tls_cert_fingerprint; content:"12:b3:5a:8e:c2:b2:ee:ee:ca:8c:d4:23:57:2a:2a:1e:03:32:5b:db"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/12b35a8ec2b2eeeeca8cd423572a2a1e03325bdb/; sid:903208483; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/12b35a8ec2b2eeeeca8cd423572a2a1e03325bdb/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!