SSLBL: Malicious SSL certificate detected (LummaStealer C&C)

SID: 903207558Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (LummaStealer C&C)"; tls_cert_fingerprint; content:"b2:99:18:f4:02:4f:11:e0:61:81:b0:e9:98:18:7f:04:62:62:c2:82"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b29918f4024f11e06181b0e998187f046262c282/; sid:903207558; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b29918f4024f11e06181b0e998187f046262c282/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!