SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903208407Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedNovember 7, 2025
UpdatedNovember 7, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"37:c9:e7:59:6a:af:79:d6:f5:7b:27:20:39:e5:36:3b:ee:46:fc:59"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/37c9e7596aaf79d6f57b272039e5363bee46fc59/; sid:903208407; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/37c9e7596aaf79d6f57b272039e5363bee46fc59/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!