SSLBL: Malicious SSL certificate detected (LummaStealer C&C)

SID: 903207463Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (LummaStealer C&C)"; tls_cert_fingerprint; content:"59:3b:1a:24:79:48:bb:15:d1:6a:63:e7:9d:c7:3a:4e:90:3b:9e:37"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/593b1a247948bb15d16a63e79dc73a4e903b9e37/; sid:903207463; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/593b1a247948bb15d16a63e79dc73a4e903b9e37/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!