SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)

SID: 903208454Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedNovember 16, 2025
UpdatedNovember 16, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureLogsStealer C&C)"; tls_cert_fingerprint; content:"ce:fa:e6:27:1b:4e:35:6f:82:89:d6:4e:d4:01:cf:5f:6c:89:b3:d4"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/cefae6271b4e356f8289d64ed401cf5f6c89b3d4/; sid:903208454; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/cefae6271b4e356f8289d64ed401cf5f6c89b3d4/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!