SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903208252Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedOctober 14, 2025
UpdatedOctober 14, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"c8:16:a3:e7:06:d7:5f:40:7c:22:44:1b:7a:78:bc:df:65:76:ac:02"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/c816a3e706d75f407c22441b7a78bcdf6576ac02/; sid:903208252; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/c816a3e706d75f407c22441b7a78bcdf6576ac02/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!