SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903208664Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 29, 2025
UpdatedDecember 29, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"c2:43:3a:e2:f0:74:16:6a:3d:ac:d6:c8:20:1c:89:d6:6a:1e:0c:c1"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/c2433ae2f074166a3dacd6c8201c89d66a1e0cc1/; sid:903208664; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/c2433ae2f074166a3dacd6c8201c89d66a1e0cc1/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!