SSLBL: Malicious SSL certificate detected (LummaStealer C&C)

SID: 903208405Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedNovember 7, 2025
UpdatedNovember 7, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (LummaStealer C&C)"; tls_cert_fingerprint; content:"7b:7c:48:a7:d1:0c:11:ab:98:88:01:fe:c6:8d:b4:1f:69:35:ec:f4"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7b7c48a7d10c11ab988801fec68db41f6935ecf4/; sid:903208405; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/7b7c48a7d10c11ab988801fec68db41f6935ecf4/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!