SSLBL: Malicious SSL certificate detected (XoriumStealer C&C)

SID: 903208514Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 3, 2025
UpdatedDecember 3, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (XoriumStealer C&C)"; tls_cert_fingerprint; content:"c9:86:36:52:b2:60:32:c9:a7:13:ab:53:12:ed:7f:7c:f5:05:8c:94"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/c9863652b26032c9a713ab5312ed7f7cf5058c94/; sid:903208514; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/c9863652b26032c9a713ab5312ed7f7cf5058c94/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!