SSLBL: Malicious SSL certificate detected (LummaStealer C&C)

SID: 903207843Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (LummaStealer C&C)"; tls_cert_fingerprint; content:"e8:2a:7a:3f:49:08:86:df:c6:89:88:7f:6e:ef:71:db:44:f4:11:81"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/e82a7a3f490886dfc689887f6eef71db44f41181/; sid:903207843; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/e82a7a3f490886dfc689887f6eef71db44f41181/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!