SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)

SID: 903207937Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)"; tls_cert_fingerprint; content:"7e:3f:5a:c9:0b:81:54:af:50:70:f0:1c:05:b6:a4:ce:63:3c:58:ee"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7e3f5ac90b8154af5070f01c05b6a4ce633c58ee/; sid:903207937; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/7e3f5ac90b8154af5070f01c05b6a4ce633c58ee/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!