SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903208527Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 4, 2025
UpdatedDecember 4, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"99:9b:b8:82:1f:12:08:70:be:5a:a5:6e:c7:43:62:7c:f6:7f:fd:17"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/999bb8821f120870be5aa56ec743627cf67ffd17/; sid:903208527; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/999bb8821f120870be5aa56ec743627cf67ffd17/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!