SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903209731Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedMay 26, 2026
UpdatedMay 26, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"89:39:20:5d:64:4c:63:85:67:0f:7c:87:34:45:5d:68:d3:8c:2c:cf"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/8939205d644c6385670f7c8734455d68d38c2ccf/; sid:903209731; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/8939205d644c6385670f7c8734455d68d38c2ccf/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!