SSLBL: Malicious SSL certificate detected (ACRStealer C&C)

SID: 903208462Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedNovember 18, 2025
UpdatedNovember 18, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ACRStealer C&C)"; tls_cert_fingerprint; content:"67:7c:bb:59:cc:06:cc:d0:14:76:93:8c:a6:d9:54:a5:8b:a7:e9:40"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/677cbb59cc06ccd01476938ca6d954a58ba7e940/; sid:903208462; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/677cbb59cc06ccd01476938ca6d954a58ba7e940/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!