SSLBL: Malicious SSL certificate detected (LummaStealer C&C)

SID: 903206148Rev: 190 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (LummaStealer C&C)"; tls_cert_fingerprint; content:"76:dc:0b:85:70:5c:03:5a:98:cc:ea:77:6c:14:72:c1:7e:89:ef:b9"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/76dc0b85705c035a98ccea776c1472c17e89efb9/; sid:903206148; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/76dc0b85705c035a98ccea776c1472c17e89efb9/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!