SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903209362Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedMarch 26, 2026
UpdatedMarch 26, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"bf:b0:01:81:d1:13:46:9c:1b:fa:7c:59:16:25:ea:5e:80:a0:2d:71"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/bfb00181d113469c1bfa7c591625ea5e80a02d71/; sid:903209362; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/bfb00181d113469c1bfa7c591625ea5e80a02d71/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!