SSLBL: Malicious SSL certificate detected (NWHStealer C&C)

SID: 903209727Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedMay 24, 2026
UpdatedMay 24, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (NWHStealer C&C)"; tls_cert_fingerprint; content:"db:67:f6:cd:dd:bc:0b:12:c1:dc:bd:97:09:91:76:ac:88:3b:27:e1"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/db67f6cdddbc0b12c1dcbd97099176ac883b27e1/; sid:903209727; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/db67f6cdddbc0b12c1dcbd97099176ac883b27e1/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!