SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903208595Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 15, 2025
UpdatedDecember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"86:74:95:e1:12:03:80:1b:69:a9:b9:4d:ea:10:7c:28:33:21:08:b6"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/867495e11203801b69a9b94dea107c28332108b6/; sid:903208595; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/867495e11203801b69a9b94dea107c28332108b6/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!