SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)

SID: 903207907Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)"; tls_cert_fingerprint; content:"2f:40:e0:23:95:04:2d:7f:c8:e5:29:e1:c6:49:ca:50:86:06:fe:ed"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2f40e02395042d7fc8e529e1c649ca508606feed/; sid:903207907; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2f40e02395042d7fc8e529e1c649ca508606feed/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!