SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903208490Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 3, 2025
UpdatedDecember 3, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"9b:55:2c:c5:6a:f1:e4:4c:5b:1e:3c:be:b9:31:9f:94:81:0c:07:da"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/9b552cc56af1e44c5b1e3cbeb9319f94810c07da/; sid:903208490; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/9b552cc56af1e44c5b1e3cbeb9319f94810c07da/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!